http://dobesland.disqus.com/Dobes Vandermeer's blog - software engineering, java programming, enlightenmentenWed, 22 Oct 2008 19:22:13 -0000http://www.dobesland.com/2008/07/02/getting-an-ssl-private-key-into-glassfish/#comment-3243224<p>Yes, very nice.</p>dobes_vandermeerWed, 22 Oct 2008 19:22:13 -0000http://www.dobesland.com/2008/07/02/getting-an-ssl-private-key-into-glassfish/#comment-3238042<p>Yes, it's new in java 1.6. Cool eh?</p>Neil DavisWed, 22 Oct 2008 17:04:34 -0000http://www.dobesland.com/2008/07/02/getting-an-ssl-private-key-into-glassfish/#comment-3235788<p>Is that a new feature of 1.6? I suppose using openssl I can convert a<br>any key file into pkcs12, so that's good news. Thanks!</p>dobes_vandermeerWed, 22 Oct 2008 15:41:22 -0000http://www.dobesland.com/2008/07/02/getting-an-ssl-private-key-into-glassfish/#comment-3235519<p>Well, if you have a pkcs12 file (containing the public/private keypair), then with Java 1.6 its simple</p><p>keytool -importkeystore -destkeystore MyKeyStore -srckeystore s1as.pkcs12 -srcstoretype PKCS12<br>keytool -list -v -alias s1as -keystore MyKeyStore <br>Enter keystore password: <br>Alias name: s1as<br>Creation date: Oct 22, 2008<br>Entry type: PrivateKeyEntry<br>Certificate chain length: 1<br>Certificate[1]:<br>Owner: CN=localhost, OU=Sun Java System Application Server, O=Sun Microsystems, L=Santa Clara, ST=California, C=US<br>Issuer: CN=localhost, OU=Sun Java System Application Server, O=Sun Microsystems, L=Santa Clara, ST=California, C=US<br>Serial number: 8b01b8a8<br>Valid from: Mon Sep 29 20:21:15 BST 2008 until: Sat Sep 29 20:21:15 BST 2018<br>Certificate fingerprints:<br> MD5: 49:FC:9F:F2:99:7F:DE:DB:08:D4:44:4D:F7:64:DA:D2<br> SHA1: AF:78:40:E1:56:37:37:53:E7:1E:3D:98:AD:5D:4B:60:6C:19:EE:CE<br> Signature algorithm name: MD5withRSA<br> Version: 3</p><p>So, yes you can import a private key into a java keystore.....<br></p>Neil DavisWed, 22 Oct 2008 15:27:14 -0000