Are you im****ting the pkcs#7 file (as a reply from a CA) into an
existing private key entry? Or, are you simply trying to create a new
trusted certificate entry?
If I remember correctly, it should succeed in the first case but the
second case demands a *single* X.509 certificate in the file.
If you really want to create a trusted certificate entry, you can
first -printcert it using the -rfc option, choose the BASE64 format
certificate you need and copy/paste it into a file, and -im****tcert
it.
- Speedo
On Apr 17, 5:49 pm, Efi Merdler <foo...@[EMAIL PROTECTED]
> wrote:
> On 17 =D7=90=D7=A4=D7=A8=D7=99=D7=9C, 02:50, Speedo
<speedo...@[EMAIL PROTECTED]
> =
wrote:
>
> > pkcs#7 is not a keyStore provider. If you want to read certificate
> > chain in a pkcs#7 file, use "keytool-im****tcert -file filename".
>
> > To find out all KeyStore providers, write a small program. See
> > http://exampledepot.com/egs/java.security/ListServices.html
> > Call getCryptoImpls("KeyStore") to find out what's available. For a
> > Sun JDK out of box, there should be al least pkcs12, jks, jceks. You
> > also get the pkcs11 one on Solaris and MSCAPI ones on Windows.
>
> > - Speedo
>
> > On Apr 16, 11:51 pm,EfiMerdler<foo...@[EMAIL PROTECTED]
> wrote:
>
> > > Hi,
> > > I am not able to use pkcs#7 as a provider forkeytool. I want to read
> > > a certificate chain encoded in PKCS#7 format usingkeytool.
>
> > > When running the following command
> > >keytool-im****t -provider pkcs7 -keystore my_cert.jks -file cert.p7 -
> > > noprompt -storepass my_cert -v
> > > I receivekeytoolerror: java.lang.ClassNotFoundException: pkcs7
> > > even when qualifying the full path I still receive the same error.
>
> > > Where can I find thekeytool'sbuilt in sup****ted providers ?
>
> > > Thanks,
> > >Efi
>
> Thanks.
> It still does not work.
> When using keytool -printcert -file cert.p7 it prints everything fine
> however when trying to im****t I receive Input not an X.509
> certificate.
>
> I tried to follow thawte tutorial on the subject
:https://search.thawte.co=
m/sup****t/ssl-digital-certificates/index?page...
> still no help there.
>
> Any ideas ?
>
> Efi
|
