Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsWhite Papers
Discussion GroupsFirst AidDatabasesJavaBeansGUIJava 3DVirtual MachineCORBASecurityToolsGeneral
Java DirectoryOpen Source ProjectsSample Book ChaptersUser GroupsWeb Resources
Related Topics
Databases.NETMore Topics ...

Java Forum / Security / July 2004

Tip: Looking for answers? Try searching our database.

open source version of the keytool

Thread view: 
Joseph Daniel Zukiger - 22 Jun 2004 05:12 GMT
Does anyone know whether an open source version of the keytool exists?

A quick search of comp.lang.java.* showed me a couple of things from
about five years back that looked kind of like what we're looking for,
but I'm too new to this stuff to be sure what I'm looking at.
Roedy Green - 22 Jun 2004 06:30 GMT
>Does anyone know whether an open source version of the keytool exists?

IBM has a keytool called Keyman.

It is written in Java but does not include source.

see http://mindprod.com/jgloss/keyman.html

Signature

Canadian Mind Products, Roedy Green.
Coaching, problem solving, economical contract programming.
See http://mindprod.com/jgloss/jgloss.html for The Java Glossary.

Shane Petroff - 22 Jun 2004 19:50 GMT
> IBM has a keytool called Keyman.

Unfortunately, it's handling of expiry dates is buggy, activity on it
appears to be dead, and it has a poorly designed UI.

--
Shane
Roedy Green - 22 Jun 2004 22:36 GMT
>> IBM has a keytool called Keyman.
>
>Unfortunately, it's handling of expiry dates is buggy, activity on it
>appears to be dead, and it has a poorly designed UI.

I don't know how legal this is, but selective decompilation of parts
of keyman or keytool would give you hints on how the pieces of the JCE
fit together.  Just getting a list of classes used by a given
procedure would be a big help.

Signature

Canadian Mind Products, Roedy Green.
Coaching, problem solving, economical contract programming.
See http://mindprod.com/jgloss/jgloss.html for The Java Glossary.

Joseph Daniel Zukiger - 23 Jun 2004 05:57 GMT
> >> IBM has a keytool called Keyman.
> >
[quoted text clipped - 5 lines]
> fit together.  Just getting a list of classes used by a given
> procedure would be a big help.

Oh, you wicked, evil person you. :-p

Of course, the time involved would prevent us from that even if we
were to decide to ignore Sun's license.

But it's a fun thought.
Chris Gray - 08 Jul 2004 09:18 GMT
>> >> IBM has a keytool called Keyman.
>> >
[quoted text clipped - 5 lines]
>> fit together.  Just getting a list of classes used by a given
>> procedure would be a big help.

Running keytool with the option -J-verbose:class should furnish some
clues. :)

> Oh, you wicked, evil person you. :-p
>
> Of course, the time involved would prevent us from that even if we
> were to decide to ignore Sun's license.

For suitable values of "us". I doubt Al Qaeda is deterred by either the time
or the license.

However for study purposes it probably makes more sense to look at the
sources of e.g. BouncyCastle. The details of the implementation will be
different, but somewhere along the line the same steps have to be performed
to reach the same result. BC doesn't handle the proprietary JKS format, but
no worry: see <http://metastatic.org/source/JKS.html>. (Lots more good
material on Casey's site, by the way).

Signature

Chris Gray      chris@kiffer.eunet.be
/k/ Embedded Java Solutions

Joseph Daniel Zukiger - 09 Jul 2004 02:40 GMT
> >> >> IBM has a keytool called Keyman.
> >> >
[quoted text clipped - 23 lines]
> no worry: see <http://metastatic.org/source/JKS.html>. (Lots more good
> material on Casey's site, by the way).

Thanks for those, Chris. (Especially since I wasn't taking the
comments about bouncy castle seriously until now. Good to know there
are still people who know how to have serious fun.)


Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.