Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsWhite Papers
Discussion GroupsFirst AidDatabasesJavaBeansGUIJava 3DVirtual MachineCORBASecurityToolsGeneral
Java DirectoryOpen Source ProjectsSample Book ChaptersUser GroupsWeb Resources
Related Topics
Databases.NETMore Topics ...

Java Forum / Security / June 2005

Tip: Looking for answers? Try searching our database.

Accessing Certificates in Windows System Stores from Java

Thread view: 
smveloso@gmail.com - 03 Jun 2005 21:41 GMT
Hi,

 Is there a standard way in Java to get access to a certificate stored
in one of the "system stores" in Windows ? What about accessing the
(references to) the keypairs stored in "key containers" ?

 Thank you !
Michel Gallant - 03 Jun 2005 23:32 GMT
Your best bet is to find some Java/Win32-COM bridge and use CAPICOM
which exposes provides most of the useful functionality in CryptoAPI including
powerful support for searching CryptoAPI certificate store/

- Mitch Gallant
  MVP Security
  JavaScience Consulting
  www.jensign.com

> Hi,
>
[quoted text clipped - 3 lines]
>
>   Thank you !
smveloso@gmail.com - 07 Jun 2005 00:09 GMT
Hi Mitch !

 Thank you  for the reply  ! I did not realise such a bridge
existed...

 Would that also solve the problem of locating the (handles to)
private keys that are stored within containers managed by CSPs ? I ask
because it seems to me that under Microsoft´s implementation, the only
way to get access to a "private key context" is through a particular
certificate (which seems strange since a certificate should hold a
*public* key). In other words: by using CAPICOM through a bridge, will
my Java applications be able to request the hashing/signing of a
document from a particular CSP ?

 May I ask you something else ? You said that is my "best bet"...
would there be any alternatives ? Somehow I do not feel safe using a
java - win32 bridge...
dala - 08 Jun 2005 22:25 GMT
Hi,

Use the Assembla JCE provider (free, but cannot export the private
keys):
https://download.assembla.se/jceprovider/

Or use Pheox JCAPI (commercial, but the evaluation version is fully
functional and can export your private keys, if exportable through
CAPI):
http://www.pheox.com/products/jcapi/

Hope it will solve your problems.

Regards,
Tommy Grandefors


Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.