File APIs for Java Developers
Manipulate DOC, XLS, PPT, PDF and many others from your application.
http://aspose.com/file-tools
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic

about Certificate Authority ..

 
Anas El-Abboud
Ranch Hand
Posts: 31
  • 0
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
hi friends ..
can any one help me in finding link fo : Certification Authority , thats mean i want tutorial about how i can build AC not how i register in one of them !
please if you can help me .. help me please ..

thanks
Anas
 
David Harkness
Ranch Hand
Posts: 1646
  • 0
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
I know only enough about this subject to be able to create and use certificates of my own in a browser without needing to accept each one. In other words, I created a CA certificate and added it to my browser -- not anyone else's browser.

If you want to be a real Certificate Authority, you'll need to get your root certificate installed in browsers. To be a real player, you'll need to get Microsoft and other browser vendors to do this. The other option (which is what the company I worked for did) is to make your certificate available and have your users add it to their root CA store.

If you want to go the latter route, you simply create a CA cert of your own and then sign other certs with it. The browser will detect that it doesn't recognize the signing cert and ask the user what to do.

If you want to be a real CA company, you'll need a business plan and some networking with the browser makers and possibly other CAs.
 
Anas El-Abboud
Ranch Hand
Posts: 31
  • 0
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
thank you v. much David Harkness ..
umm realy am now not going to build my own company which can do that work , but i have a project in this subject and it will be my final project for the graduation certificate in Information Technology [IT] in Syria-Damas University ..
and this subject is good to me cause i like the security of networks ..
so if you have any information about this subject "how to make" please help me ..
thanks
Anas
 
David Harkness
Ranch Hand
Posts: 1646
  • 0
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
As a CA cert is just another certificate that has signed other certificates, all you really need to do is generate or purchase a certificate (the latter will be signed by the CA) and sign some other certificates.

You can use the keytool program included in the JDK to do both of these, IIRC. As I said, it's been awhile, but I do remember that I used keytool to generate our CA cert and the standard Java crypto libraries to sign the certs we generated on-the-fly.
 
Anas El-Abboud
Ranch Hand
Posts: 31
  • 0
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
thank you very much Harkness , i'll use that keyTool ..
thanks , and i'll post you my problems if i facesd some .. OK ?


thanks , Anas
 
It is sorta covered in the JavaRanch Style Guide.
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic