# X509 Ceritifcates and Javakey

Ryan P. McCormack (ryanm@cam.nist.gov)
Thu, 4 Feb 1999 10:50:36 -0500

- Messages sorted by: [ date ][ thread ][ subject ][ author ]
- Next message: Ryan P. McCormack: "JSECURITY Issue: Signed applet in Netscape / OS2"
- Previous message: Sergey Yakovlev Block Ltd.: "JDK 1.2 Error decompression"

    From: "Ryan P. McCormack" <ryanm@cam.nist.gov>

    Message-Id: <990204105036.ZM38652@juggle.cam.nist.gov>

    Date: Thu, 4 Feb 1999 10:50:36 -0500

    To: java-security@java.sun.com

    Subject: X509 Ceritifcates and Javakey

Greetings,

I have been scouring the FAQs, newsgroups, and archives, but have not been able
to find simple answers to my question. I have an X509v3 certificate that I
wish to use for signing applets (we have our own CA on site). I have the
certificate in PEM format (base64 encoded). The questions I came up against in
trying to import this certificate using javakey are as follows:

1) According to the javakey documentation, it expects certificates in X509
format. In my exposure to security and certificate-related issues, I have
never come across this generic term. Am I to assume this is DER encoding of
the X509 cert?

2) Can I import X509v3 certificates with javakey, even though it can only
generate X509v1?

3) Is my certificate essentially useless if it doesn't contain DSA keys?

Any information you could provide would be really useful. I'd also be
interested in knowing whether I should even bother to work with javakey, since
it looks like 'keytool' is a bit more advanced.

Thanks in advance,
Ryan

    --
    =============================================***=
      Dr. Ryan McCormack
      High Performance Systems Division
      National Institute of Standards and Technology
    =================================================***=

- Next message: Ryan P. McCormack: "JSECURITY Issue: Signed applet in Netscape / OS2"
- Previous message: Sergey Yakovlev Block Ltd.: "JDK 1.2 Error decompression"