Generating Certificate and Certificate request

[hisham ragheb]

Hi all,

Im totally new in this area so please be patient with me.

i want to make a secure web connection. so, i created the private key with openSSL as follow:

openssl>genrsa -out mykey.pem

here is my first question???

do i have to generate a CSR? or public key certificate?

should i use:

openssl>req -new -key mykey.pem -out mypublic.pem
or
openssl>req -new -key mykey.pem -x509 -out mypublic.pem

My second question is:
how do the web browsers of the clients automatically load my public key and use it to encrypt data when a form request is dedicated to my web site



regards

[greg stark]

1. This is java forum, so you should restrict yourself to java relevant questions.
2. Both the browser and the server support the SSL/TLS protocol, which is described in RFC 2246 and its sucessors. It is available to java programmers through the JSSE.

[hisham ragheb]

greg stark wrote:1. This is java forum, so you should restrict yourself to java relevant questions.
2. Both the browser and the server support the SSL/TLS protocol, which is described in RFC 2246 and its sucessors. It is available to java programmers through the JSSE.

This question is very related to java,because:

1-i want to add the public/private keys to the keystore
2-i want to use the private key to sign my jar using the jar signer
3-i want to configure the java.policy to trust the digital signature on the jar file

i think all of this is related to java anyway