Keystore and certificate and client application

Hi all,

I exported a certificate from the Internet Explorer of a customer of mine;i have been asked to specify a password and then i saved the certificate into a directory of my pc.

Well, now i have to write a client application to connect to the site of my customer using his certificate.

After reading something about SSL and Java i wnat to know if the following steps are right or not :

- I have to create a new keystore using a program

- I have to import in the keystore the certificate

- I have to write the client application which read the keystore i created and then invoke the website of my customer.

Are these steps right ?

I found the instructions to do the previuos steps, but i wanted the confirm that they were right.

I wrote that exporting the certificate i have been asked to specify a password, could this password be anything or do ihave to ask my customer a particular password.

Moreover, doi have to use the same password even i create the new keystore ?

Anyway, cheers.

Stefano

[1081 byte] By [warxsga] at [2007-11-27 7:34:14]
# 1

> - I have to create a new keystore using a program

Yes

> - I have to import in the keystore the certificate

Yes

> - I have to write the client application which read

> the keystore i created and then invoke the website

> of my customer.

No. You have to write a client application which sets the system property javax.net.ssl.truststore to the location of that keystore and uses SSLSockets or HttpsURLConnections.

> I wrote that exporting the certificate i have been

> asked to specify a password, could this password be

> anything or do ihave to ask my customer a particular

> password.

The password was to access the IE keystore, it is not a password for the exported certificate.

> Moreover, doi have to use the same password even i

> create the new keystore ?

No, use your own.

ejpa at 2007-7-12 19:14:42 > top of Java-index,Security,Java Secure Socket Extension (JSSE)...
# 2
Are you sure you were exporting a certificate from IE? AFAIK, no password is needed when exporting a certificate. Is it a private key?Forgive me if I'm wrong coz I haven't touched IE for some time.Message was edited by: wangwj
wangwja at 2007-7-12 19:14:42 > top of Java-index,Security,Java Secure Socket Extension (JSSE)...