You are viewing a plain text version of this content. The canonical link for it is here.
Posted to fx-dev@ws.apache.org by zhou ying <zh...@gmail.com> on 2006/05/11 15:03:51 UTC

how to creat a key

hi
i want to know how to creat a key. in fact i have successed in signing and
crypting with the keys which i found in the wss4j. now i want to creat my
key. so i want to know how to do a key like the key x509.PFX.MSFT. what is
the type of it?
thx for answer to me

regards

ying

Re: how to creat a key

Posted by Ruchith Fernando <ru...@gmail.com>.
Attempt #3 : should work since the infra guys just fixed the problem
with the list

On 5/15/06, Ruchith Fernando <ru...@gmail.com> wrote:
> Hi ying,
>
> Try using "org.apache.ws.security.saml.issuer.key.name" instead of
> "org.apache.ws.security.crypto.merlin.keystore.alias"
>
> Please have a look at this [1] as well .
>
> Thanks,
> Ruchith
>
> [1] http://svn.apache.org/repos/asf/webservices/wss4j/trunk/src/saml3.properties
>
> On 5/15/06, zhou ying <zh...@gmail.com> wrote:
> > Hi Ruchith
> >
> > i don't think that i need to put the value of the "user", because i use the
> > confirmation method with sender-vous. so i hava no parameter "user". for the
> > parameter
> > org.apache.ws.security.crypto.merlin.keystore.alias , i
> > have changed.
> > maybe it's the probleme of my private key
> > i show you the information of the key
> >
> >  Keystore type: jks
> >  Keystore provider: SUN
> >
> >  Your keystore contains 1 entry
> >
> >  Alias name: carreservie
> >  Creation date: Mar 8, 2006
> >  Entry type: keyEntry
> >  Certificate chain length: 1
> >  Certificate[1]:
> >  Owner: CN=Service, OU=bu, O=bu, L=ps, ST=ps, C=FR
> >  Issuer: CN=Service, OU=bu, O=bu, L=ps, ST=ps, C=FR
> >  Serial number: 440eb944
> >  Valid from: Wed Mar 08 12:00:20 CET 2006 until: Tue Jun 06 13:00:20 CEST
> > 2006
> >  Certificate fingerprints:
> >           MD5:
> > 17:9D:5D:DA:90:0E:00:02:12:00:C6:21:6F:1F:4E:39
> >           SHA1:
> > 35:B7:D0:68:B2:A1:B0:79:1A:EE:9D:34:AC:05:21:E9:08:B5:A2:C6
> >
> > regards
> >  ying
> >
> >
> >
> > On 5/15/06, Ruchith Fernando < ruchith.fernando@gmail.com> wrote:
> > > Hi ying,
> > >
> > > The value of the "user" parameter in your configuration must be the
> > > alias of the private key in the keystore that you created.
> > >
> > > Thanks,
> > > Ruchith
> > >
> > > On 5/15/06, zhou ying < zhou2000.622@gmail.com> wrote:
> > > > hi Ruchith
> > > >
> > > >  thank you for your help.
> > > >  i made un keystore using keytool with type jks. i want to use it for
> > sign
> > > > saml. but i have some error liks this
> > > >
> > > >  Exception in thread "main"
> > > > org.apache.ws.security.WSSecurityException: WSHandler:
> > > > Signed SAML: error during message
> > > > processingorg.apache.ws.security.WSSecurityException:
> > > > General security error (Unexpected number of X509Data: for Signature)
> > > >          at
> > > >
> > org.apache.ws.security.handler.WSHandler.performST_SIGNAction(WSHandler.java:370)
> > > >          at
> > > >
> > org.apache.ws.security.handler.WSHandler.doSenderAction(WSHandler.java:155)
> > > >          at
> > > >
> > org.apache.ws.axis.security.WSDoAllSender.invoke(WSDoAllSender.java:161)
> > > >          at
> > > >
> > org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
> > > >          at
> > > > org.apache.axis.SimpleChain.doVisiting
> > (SimpleChain.java:118)
> > > >          at
> > > > org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
> > > >          at
> > > >
> > org.apache.axis.client.AxisClient.invoke(AxisClient.java:121)
> > > >          at
> > > >
> > org.apache.axis.client.Call.invokeEngine(Call.java:2765)
> > > >          at
> > > > org.apache.axis.client.Call.invoke(Call.java:2748)
> > > >          at
> > > > org.apache.axis.client.Call.invoke(Call.java:2424)
> > > >          at
> > > > org.apache.axis.client.Call.invoke(Call.java:2347)
> > > >          at
> > > > org.apache.axis.client.Call.invoke(Call.java:1804)
> > > >          at
> > > >
> > client.CarreServiceSoapBindingStub.calcul(CarreServiceSoapBindingStub.java
> > :103)
> > > >          at client.Client.main(Client.java:19)
> > > >
> > > >  i have tried to find solution on internet. i find that you had the same
> > > > probleme as me. so i want to know how you could deal with this probleme.
> > > >
> > > >  thx
> > > >
> > > >  ragards
> > > >
> > > >  ying
> > > >
> > >
> >
> >
>

---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org


Re: how to creat a key

Posted by Ruchith Fernando <ru...@gmail.com>.
On 5/15/06, zhou ying <zh...@gmail.com> wrote:
> hi ruchith
>  i have changed the
> org.apache.ws.security.saml.issuer.key.name too. because
> org.apache.ws.securtity.saml.issuer.key.name is in the file
> saml3.properties. and
> org.apache.ws.security.crypto.merlin.keystore.alias is in
> the file crypto.properties. i need both of them.
>  by the way, is it possible that i can attribue saml using wss4j?

I'm not sure whether you can do it with the default SAML issuer impl [1]

If not you can consider writing your own issuer (which implements
org.apache.ws.security.saml.SAMLIssuer)... WSS4J uses the opensaml
library and it should probably have support for saml attribute
statements.

[1] http://svn.apache.org/repos/asf/webservices/wss4j/trunk/src/org/apache/ws/security/saml/SAMLIssuerImpl.java

---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org


Re: how to creat a key

Posted by Ruchith Fernando <ru...@gmail.com>.
Attempt #3 : should work since the infra guys just fixed the problem
with the list

On 5/15/06, Ruchith Fernando <ru...@gmail.com> wrote:
> Hi ying,
>
> Try using "org.apache.ws.security.saml.issuer.key.name" instead of
> "org.apache.ws.security.crypto.merlin.keystore.alias"
>
> Please have a look at this [1] as well .
>
> Thanks,
> Ruchith
>
> [1] http://svn.apache.org/repos/asf/webservices/wss4j/trunk/src/saml3.properties
>
> On 5/15/06, zhou ying <zh...@gmail.com> wrote:
> > Hi Ruchith
> >
> > i don't think that i need to put the value of the "user", because i use the
> > confirmation method with sender-vous. so i hava no parameter "user". for the
> > parameter
> > org.apache.ws.security.crypto.merlin.keystore.alias , i
> > have changed.
> > maybe it's the probleme of my private key
> > i show you the information of the key
> >
> >  Keystore type: jks
> >  Keystore provider: SUN
> >
> >  Your keystore contains 1 entry
> >
> >  Alias name: carreservie
> >  Creation date: Mar 8, 2006
> >  Entry type: keyEntry
> >  Certificate chain length: 1
> >  Certificate[1]:
> >  Owner: CN=Service, OU=bu, O=bu, L=ps, ST=ps, C=FR
> >  Issuer: CN=Service, OU=bu, O=bu, L=ps, ST=ps, C=FR
> >  Serial number: 440eb944
> >  Valid from: Wed Mar 08 12:00:20 CET 2006 until: Tue Jun 06 13:00:20 CEST
> > 2006
> >  Certificate fingerprints:
> >           MD5:
> > 17:9D:5D:DA:90:0E:00:02:12:00:C6:21:6F:1F:4E:39
> >           SHA1:
> > 35:B7:D0:68:B2:A1:B0:79:1A:EE:9D:34:AC:05:21:E9:08:B5:A2:C6
> >
> > regards
> >  ying
> >
> >
> >
> > On 5/15/06, Ruchith Fernando < ruchith.fernando@gmail.com> wrote:
> > > Hi ying,
> > >
> > > The value of the "user" parameter in your configuration must be the
> > > alias of the private key in the keystore that you created.
> > >
> > > Thanks,
> > > Ruchith
> > >
> > > On 5/15/06, zhou ying < zhou2000.622@gmail.com> wrote:
> > > > hi Ruchith
> > > >
> > > >  thank you for your help.
> > > >  i made un keystore using keytool with type jks. i want to use it for
> > sign
> > > > saml. but i have some error liks this
> > > >
> > > >  Exception in thread "main"
> > > > org.apache.ws.security.WSSecurityException: WSHandler:
> > > > Signed SAML: error during message
> > > > processingorg.apache.ws.security.WSSecurityException:
> > > > General security error (Unexpected number of X509Data: for Signature)
> > > >          at
> > > >
> > org.apache.ws.security.handler.WSHandler.performST_SIGNAction(WSHandler.java:370)
> > > >          at
> > > >
> > org.apache.ws.security.handler.WSHandler.doSenderAction(WSHandler.java:155)
> > > >          at
> > > >
> > org.apache.ws.axis.security.WSDoAllSender.invoke(WSDoAllSender.java:161)
> > > >          at
> > > >
> > org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
> > > >          at
> > > > org.apache.axis.SimpleChain.doVisiting
> > (SimpleChain.java:118)
> > > >          at
> > > > org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
> > > >          at
> > > >
> > org.apache.axis.client.AxisClient.invoke(AxisClient.java:121)
> > > >          at
> > > >
> > org.apache.axis.client.Call.invokeEngine(Call.java:2765)
> > > >          at
> > > > org.apache.axis.client.Call.invoke(Call.java:2748)
> > > >          at
> > > > org.apache.axis.client.Call.invoke(Call.java:2424)
> > > >          at
> > > > org.apache.axis.client.Call.invoke(Call.java:2347)
> > > >          at
> > > > org.apache.axis.client.Call.invoke(Call.java:1804)
> > > >          at
> > > >
> > client.CarreServiceSoapBindingStub.calcul(CarreServiceSoapBindingStub.java
> > :103)
> > > >          at client.Client.main(Client.java:19)
> > > >
> > > >  i have tried to find solution on internet. i find that you had the same
> > > > probleme as me. so i want to know how you could deal with this probleme.
> > > >
> > > >  thx
> > > >
> > > >  ragards
> > > >
> > > >  ying
> > > >
> > >
> >
> >
>

---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org


Re: how to creat a key

Posted by Ruchith Fernando <ru...@gmail.com>.
On 5/15/06, zhou ying <zh...@gmail.com> wrote:
> hi ruchith
>  i have changed the
> org.apache.ws.security.saml.issuer.key.name too. because
> org.apache.ws.securtity.saml.issuer.key.name is in the file
> saml3.properties. and
> org.apache.ws.security.crypto.merlin.keystore.alias is in
> the file crypto.properties. i need both of them.
>  by the way, is it possible that i can attribue saml using wss4j?

I'm not sure whether you can do it with the default SAML issuer impl [1]

If not you can consider writing your own issuer (which implements
org.apache.ws.security.saml.SAMLIssuer)... WSS4J uses the opensaml
library and it should probably have support for saml attribute
statements.

[1] http://svn.apache.org/repos/asf/webservices/wss4j/trunk/src/org/apache/ws/security/saml/SAMLIssuerImpl.java

---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org


Re: how to creat a key

Posted by Ruchith Fernando <ru...@gmail.com>.
Hi ying,

> what's means of keystore. what is the defferents entre keystore key et
> certificate?

This will answer the above questions : [1]

> can i make a keystore like x509.PFX.MSFT? i should use openssl or keytool?
> can we make the same key using openssl and keytool?

Yes.. you can make your own keystore similar to x509.PFX.MSFT. You can
use "openssl pkcs12"  OR "keytool" to do this. If you are looking for
a tool with a GUI you can try "protecle" [2]

> i know that i have many quesions naive. but i want to understand

No problem ...  :-)

Thanks,
Ruchith

---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org


Re: how to creat a key

Posted by Ruchith Fernando <ru...@gmail.com>.
Hi ying,

> what's means of keystore. what is the defferents entre keystore key et
> certificate?

This will answer the above questions : [1]

> can i make a keystore like x509.PFX.MSFT? i should use openssl or keytool?
> can we make the same key using openssl and keytool?

Yes.. you can make your own keystore similar to x509.PFX.MSFT. You can
use "openssl pkcs12"  OR "keytool" to do this. If you are looking for
a tool with a GUI you can try "protecle" [2]

> i know that i have many quesions naive. but i want to understand

No problem ...  :-)

Thanks,
Ruchith

---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org


Re: how to creat a key

Posted by zhou ying <zh...@gmail.com>.
hi ruchith
thx very much. i can see it now
in fact i have many question. i don't understand.
what's means of keystore. what is the defferents entre keystore key et
certificate?
can i make a keystore like x509.PFX.MSFT? i should use openssl or keytool?
can we make the same key using openssl and keytool?
i know that i have many quesions naive. but i want to understand
thx for answer to me
regards
ying


On 5/12/06, Ruchith Fernando <ru...@gmail.com> wrote:
>
> HI ying,
>
> x509.PFX.MSFT is a PKCS12 keystore with which holds the priate key and
> the public key certificate.
>
> You can try the following command to see the contents of the
> x509.PFX.MSFT file (from the same dir that the file is in).
>
> keytool -list -keystore x509.PFX.MSFT -storepass security -storetype
> pkcs12 -v
>
> you should see this output : [1]
>
> HTH
>
> Thanks,
> Ruchith
>
> [1] http://rafb.net/paste/results/0xAI8s84.html
>
>
> >  thx; i have bad my key. there is no probleme now.
> > but i have a question. what type is it the x509.PFX.MSFT? it is a key or
> a
> > certificate. how can i creat something to instead of it?
> > i need your help
> > thx
> >
> > ragards
> >
> >
> > ying
> >
> >
> >
> > >
> > >
> > > On 5/11/06, Mike Smorul <toaster@umiacs.umd.edu > wrote:
> > > >
> > > > We use the following for creating pkcs12 stores for saml signing
> with
> > > > openssl
> > > >
> > http://narawiki.umiacs.umd.edu/twiki/bin/view/Lab/CreateCertAuth
> > > >
> > > > and a simple servlet to do the same.
> > > >
> > > >
> > http://narawiki.umiacs.umd.edu/twiki/bin/view/Main/AdaptCa
> > > >
> > > > -Mike
> > > >
> > > > zhou ying wrote:
> > > > > hi
> > > > > i want to know how to creat a key. in fact i have successed in
> signing
> > > > > and crypting with the keys which i found in the wss4j. now i want
> to
> > > > > creat my key. so i want to know how to do a key like the key
> > > > > x509.PFX.MSFT. what is the type of it?
> > > > > thx for answer to me
> > > > >
> > > > > regards
> > > > >
> > > > > ying
> > > >
> > > >
> > >
> > >
> >
> >
>

Re: how to creat a key

Posted by zhou ying <zh...@gmail.com>.
hi ruchith
thx very much. i can see it now
in fact i have many question. i don't understand.
what's means of keystore. what is the defferents entre keystore key et
certificate?
can i make a keystore like x509.PFX.MSFT? i should use openssl or keytool?
can we make the same key using openssl and keytool?
i know that i have many quesions naive. but i want to understand
thx for answer to me
regards
ying


On 5/12/06, Ruchith Fernando <ru...@gmail.com> wrote:
>
> HI ying,
>
> x509.PFX.MSFT is a PKCS12 keystore with which holds the priate key and
> the public key certificate.
>
> You can try the following command to see the contents of the
> x509.PFX.MSFT file (from the same dir that the file is in).
>
> keytool -list -keystore x509.PFX.MSFT -storepass security -storetype
> pkcs12 -v
>
> you should see this output : [1]
>
> HTH
>
> Thanks,
> Ruchith
>
> [1] http://rafb.net/paste/results/0xAI8s84.html
>
>
> >  thx; i have bad my key. there is no probleme now.
> > but i have a question. what type is it the x509.PFX.MSFT? it is a key or
> a
> > certificate. how can i creat something to instead of it?
> > i need your help
> > thx
> >
> > ragards
> >
> >
> > ying
> >
> >
> >
> > >
> > >
> > > On 5/11/06, Mike Smorul <toaster@umiacs.umd.edu > wrote:
> > > >
> > > > We use the following for creating pkcs12 stores for saml signing
> with
> > > > openssl
> > > >
> > http://narawiki.umiacs.umd.edu/twiki/bin/view/Lab/CreateCertAuth
> > > >
> > > > and a simple servlet to do the same.
> > > >
> > > >
> > http://narawiki.umiacs.umd.edu/twiki/bin/view/Main/AdaptCa
> > > >
> > > > -Mike
> > > >
> > > > zhou ying wrote:
> > > > > hi
> > > > > i want to know how to creat a key. in fact i have successed in
> signing
> > > > > and crypting with the keys which i found in the wss4j. now i want
> to
> > > > > creat my key. so i want to know how to do a key like the key
> > > > > x509.PFX.MSFT. what is the type of it?
> > > > > thx for answer to me
> > > > >
> > > > > regards
> > > > >
> > > > > ying
> > > >
> > > >
> > >
> > >
> >
> >
>

Re: how to creat a key

Posted by Ruchith Fernando <ru...@gmail.com>.
HI ying,

x509.PFX.MSFT is a PKCS12 keystore with which holds the priate key and
the public key certificate.

You can try the following command to see the contents of the
x509.PFX.MSFT file (from the same dir that the file is in).

keytool -list -keystore x509.PFX.MSFT -storepass security -storetype pkcs12 -v

you should see this output : [1]

HTH

Thanks,
Ruchith

[1] http://rafb.net/paste/results/0xAI8s84.html


>  thx; i have bad my key. there is no probleme now.
> but i have a question. what type is it the x509.PFX.MSFT? it is a key or a
> certificate. how can i creat something to instead of it?
> i need your help
> thx
>
> ragards
>
>
> ying
>
>
>
> >
> >
> > On 5/11/06, Mike Smorul <toaster@umiacs.umd.edu > wrote:
> > >
> > > We use the following for creating pkcs12 stores for saml signing with
> > > openssl
> > >
> http://narawiki.umiacs.umd.edu/twiki/bin/view/Lab/CreateCertAuth
> > >
> > > and a simple servlet to do the same.
> > >
> > >
> http://narawiki.umiacs.umd.edu/twiki/bin/view/Main/AdaptCa
> > >
> > > -Mike
> > >
> > > zhou ying wrote:
> > > > hi
> > > > i want to know how to creat a key. in fact i have successed in signing
> > > > and crypting with the keys which i found in the wss4j. now i want to
> > > > creat my key. so i want to know how to do a key like the key
> > > > x509.PFX.MSFT. what is the type of it?
> > > > thx for answer to me
> > > >
> > > > regards
> > > >
> > > > ying
> > >
> > >
> >
> >
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org


Re: how to creat a key

Posted by Ruchith Fernando <ru...@gmail.com>.
HI ying,

x509.PFX.MSFT is a PKCS12 keystore with which holds the priate key and
the public key certificate.

You can try the following command to see the contents of the
x509.PFX.MSFT file (from the same dir that the file is in).

keytool -list -keystore x509.PFX.MSFT -storepass security -storetype pkcs12 -v

you should see this output : [1]

HTH

Thanks,
Ruchith

[1] http://rafb.net/paste/results/0xAI8s84.html


>  thx; i have bad my key. there is no probleme now.
> but i have a question. what type is it the x509.PFX.MSFT? it is a key or a
> certificate. how can i creat something to instead of it?
> i need your help
> thx
>
> ragards
>
>
> ying
>
>
>
> >
> >
> > On 5/11/06, Mike Smorul <toaster@umiacs.umd.edu > wrote:
> > >
> > > We use the following for creating pkcs12 stores for saml signing with
> > > openssl
> > >
> http://narawiki.umiacs.umd.edu/twiki/bin/view/Lab/CreateCertAuth
> > >
> > > and a simple servlet to do the same.
> > >
> > >
> http://narawiki.umiacs.umd.edu/twiki/bin/view/Main/AdaptCa
> > >
> > > -Mike
> > >
> > > zhou ying wrote:
> > > > hi
> > > > i want to know how to creat a key. in fact i have successed in signing
> > > > and crypting with the keys which i found in the wss4j. now i want to
> > > > creat my key. so i want to know how to do a key like the key
> > > > x509.PFX.MSFT. what is the type of it?
> > > > thx for answer to me
> > > >
> > > > regards
> > > >
> > > > ying
> > >
> > >
> >
> >
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org


Re: how to creat a key

Posted by zhou ying <zh...@gmail.com>.
 thx; i have bad my key. there is no probleme now.
but i have a question. what type is it the x509.PFX.MSFT? it is a key or a
certificate. how can i creat something to instead of it?
i need your help
thx

ragards

ying


>  On 5/11/06, Mike Smorul <to...@umiacs.umd.edu> wrote:
> >
> >
> > We use the following for creating pkcs12 stores for saml signing with
> > openssl
> > http://narawiki.umiacs.umd.edu/twiki/bin/view/Lab/CreateCertAuth
> >
> > and a simple servlet to do the same.
> >
> > http://narawiki.umiacs.umd.edu/twiki/bin/view/Main/AdaptCa
> >
> > -Mike
> >
> > zhou ying wrote:
> > > hi
> > > i want to know how to creat a key. in fact i have successed in signing
> > > and crypting with the keys which i found in the wss4j. now i want to
> > > creat my key. so i want to know how to do a key like the key
> > > x509.PFX.MSFT. what is the type of it?
> > > thx for answer to me
> > >
> > > regards
> > >
> > > ying
> >
> >
>

Re: how to creat a key

Posted by zhou ying <zh...@gmail.com>.
 thx; i have bad my key. there is no probleme now.
but i have a question. what type is it the x509.PFX.MSFT? it is a key or a
certificate. how can i creat something to instead of it?
i need your help
thx

ragards

ying


>  On 5/11/06, Mike Smorul <to...@umiacs.umd.edu> wrote:
> >
> >
> > We use the following for creating pkcs12 stores for saml signing with
> > openssl
> > http://narawiki.umiacs.umd.edu/twiki/bin/view/Lab/CreateCertAuth
> >
> > and a simple servlet to do the same.
> >
> > http://narawiki.umiacs.umd.edu/twiki/bin/view/Main/AdaptCa
> >
> > -Mike
> >
> > zhou ying wrote:
> > > hi
> > > i want to know how to creat a key. in fact i have successed in signing
> > > and crypting with the keys which i found in the wss4j. now i want to
> > > creat my key. so i want to know how to do a key like the key
> > > x509.PFX.MSFT. what is the type of it?
> > > thx for answer to me
> > >
> > > regards
> > >
> > > ying
> >
> >
>

Re: how to creat a key

Posted by Mike Smorul <to...@umiacs.umd.edu>.
We use the following for creating pkcs12 stores for saml signing with 
openssl
http://narawiki.umiacs.umd.edu/twiki/bin/view/Lab/CreateCertAuth

and a simple servlet to do the same.

http://narawiki.umiacs.umd.edu/twiki/bin/view/Main/AdaptCa

-Mike

zhou ying wrote:
> hi
> i want to know how to creat a key. in fact i have successed in signing 
> and crypting with the keys which i found in the wss4j. now i want to 
> creat my key. so i want to know how to do a key like the key 
> x509.PFX.MSFT. what is the type of it?
> thx for answer to me
>  
> regards
>  
> ying


---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org


Re: how to creat a key

Posted by Mike Smorul <to...@umiacs.umd.edu>.
We use the following for creating pkcs12 stores for saml signing with 
openssl
http://narawiki.umiacs.umd.edu/twiki/bin/view/Lab/CreateCertAuth

and a simple servlet to do the same.

http://narawiki.umiacs.umd.edu/twiki/bin/view/Main/AdaptCa

-Mike

zhou ying wrote:
> hi
> i want to know how to creat a key. in fact i have successed in signing 
> and crypting with the keys which i found in the wss4j. now i want to 
> creat my key. so i want to know how to do a key like the key 
> x509.PFX.MSFT. what is the type of it?
> thx for answer to me
>  
> regards
>  
> ying


---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org