# KeyTool not JCE provider independent

Johannes Farmer (Johannes.Farmer@iaik.tu-graz.ac.at)
Mon, 15 Mar 1999 15:18:29 +0100

- Messages sorted by: [ date ][ thread ][ subject ][ author ]
- Next message: faten@eg.ibm.com: "Need help about java encryption"
- Previous message: Frank Yellin: "Getting a CA-signed certificate. . . Futility"
- Next in thread: Jan Luehe: "Re: KeyTool not JCE provider independent"

    From: "Johannes Farmer" <Johannes.Farmer@iaik.tu-graz.ac.at>

    To: <java-security@java.sun.com>

    Subject: KeyTool not JCE provider independent

    Date: Mon, 15 Mar 1999 15:18:29 +0100

This is a multipart MIME message, it may require a MIME capable user agent.
----IAIK.SMIME.MAPPER.F7741B13--
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hi,

I implemented the KeyStoreSpi (using JDK 1.2) and have now troubles using
it with the KeyTool.

Method printX509Cert(...) in KeyTool.java contains the following line

(X500Name)cert.getSubjectDN()

cert is an instance of java.security.cert.X509Certificate and its method
getSubjectDN() should return a instance of Principal. But this is casted to
sun.security.x509.X500Name.

replacing this line with
cert.getSubjectDN().toString()
would make KeyTool provider independent.

Are there any further problems like this in KeyTool?

Is there a solution for me?

Thank you very much for any help,

Johannes Farmer

----IAIK.SMIME.MAPPER.F7741B13--
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Disposition: attachment; filename="smime.p7s"
Content-Transfer-Encoding: base64
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----IAIK.SMIME.MAPPER.F7741B13----

- Next message: faten@eg.ibm.com: "Need help about java encryption"
- Previous message: Frank Yellin: "Getting a CA-signed certificate. . . Futility"
- Next in thread: Jan Luehe: "Re: KeyTool not JCE provider independent"