This week's giveaway is in the Android forum.
We're giving away four copies of Android Security Essentials Live Lessons and have Godfrey Nolan on-line!
See this thread for details.
The moose likes Security and the fly likes Using Bouncy Castle - Generate a Certificate and Sign that by CA Root Certificate Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login


Win a copy of Android Security Essentials Live Lessons this week in the Android forum!
JavaRanch » Java Forums » Engineering » Security
Bookmark "Using Bouncy Castle - Generate a Certificate and Sign that by CA Root Certificate" Watch "Using Bouncy Castle - Generate a Certificate and Sign that by CA Root Certificate" New topic
Author

Using Bouncy Castle - Generate a Certificate and Sign that by CA Root Certificate

KasiMurugan Ramasamy
Ranch Hand

Joined: Jan 30, 2005
Posts: 125
Hi All,

I want to know how do generate the KeyPair and Sign that certificate by CA Root Certificate.

I need some code sample or link to get more info.


Thanks & Regards
Kasimurugan (SCJP1.4, SCBCD1.3), Preparing SCWCD1.4
James Sabre
Ranch Hand

Joined: Sep 07, 2004
Posts: 781

KasiMurugan Ramasamy wrote:Hi All,

I want to know how do generate the KeyPair and Sign that certificate by CA Root Certificate.

I need some code sample or link to get more info.



You cannot sign the certificate using the CA root certificate since one signs using the private key associated with the CA root certificate and the CA will never ever ever release that to you.


Retired horse trader.
 Note: double-underline links may be advertisements automatically added by this site and are probably not endorsed by me.
T H Lim
Greenhorn

Joined: Oct 14, 2004
Posts: 28
Create a certificate CSR for the CA to sign. This is the part where you pay them to sign your certificate. Next, keep the signed certificate that the CA return to you in your keystore.
KasiMurugan Ramasamy
Ranch Hand

Joined: Jan 30, 2005
Posts: 125
HI All,

Thanks for reply. My question was, Signing a certificate by using certificate(our certificate, so private key will be with us only) returned from CA.

I found the way. I have done it.

Thank so you so much for replies.
Rohit Raghav
Greenhorn

Joined: Mar 08, 2011
Posts: 1
Hi KasiMurugan Ramasamy, I am looking for the samething so can you please help me with solution.
Thanks
 
Consider Paul's rocket mass heater.
 
subject: Using Bouncy Castle - Generate a Certificate and Sign that by CA Root Certificate
 
Similar Threads
Creating CA using keytool
Failed to establish chain problem
Understanding Signed MIDlet Suite with x.509 PKI?
What is the purpose of certificate chaining?
about Certificate Authority ..