aspose file tools*
The moose likes Java in General and the fly likes about Certificate Authority .. Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login
JavaRanch » Java Forums » Java » Java in General
Bookmark "about Certificate Authority .." Watch "about Certificate Authority .." New topic
Author

about Certificate Authority ..

Anas El-Abboud
Ranch Hand

Joined: Dec 12, 2003
Posts: 31
hi friends ..
can any one help me in finding link fo : Certification Authority , thats mean i want tutorial about how i can build AC not how i register in one of them !
please if you can help me .. help me please ..

thanks
Anas


We work in mud to reach sky ..
David Harkness
Ranch Hand

Joined: Aug 07, 2003
Posts: 1646
I know only enough about this subject to be able to create and use certificates of my own in a browser without needing to accept each one. In other words, I created a CA certificate and added it to my browser -- not anyone else's browser.

If you want to be a real Certificate Authority, you'll need to get your root certificate installed in browsers. To be a real player, you'll need to get Microsoft and other browser vendors to do this. The other option (which is what the company I worked for did) is to make your certificate available and have your users add it to their root CA store.

If you want to go the latter route, you simply create a CA cert of your own and then sign other certs with it. The browser will detect that it doesn't recognize the signing cert and ask the user what to do.

If you want to be a real CA company, you'll need a business plan and some networking with the browser makers and possibly other CAs.
Anas El-Abboud
Ranch Hand

Joined: Dec 12, 2003
Posts: 31
thank you v. much David Harkness ..
umm realy am now not going to build my own company which can do that work , but i have a project in this subject and it will be my final project for the graduation certificate in Information Technology [IT] in Syria-Damas University ..
and this subject is good to me cause i like the security of networks ..
so if you have any information about this subject "how to make" please help me ..
thanks
Anas
David Harkness
Ranch Hand

Joined: Aug 07, 2003
Posts: 1646
As a CA cert is just another certificate that has signed other certificates, all you really need to do is generate or purchase a certificate (the latter will be signed by the CA) and sign some other certificates.

You can use the keytool program included in the JDK to do both of these, IIRC. As I said, it's been awhile, but I do remember that I used keytool to generate our CA cert and the standard Java crypto libraries to sign the certs we generated on-the-fly.
Anas El-Abboud
Ranch Hand

Joined: Dec 12, 2003
Posts: 31
thank you very much Harkness , i'll use that keyTool ..
thanks , and i'll post you my problems if i facesd some .. OK ?


thanks , Anas
 
I agree. Here's the link: http://aspose.com/file-tools
 
subject: about Certificate Authority ..