Se ha denunciado esta presentación.
Utilizamos tu perfil de LinkedIn y tus datos de actividad para personalizar los anuncios y mostrarte publicidad más relevante. Puedes cambiar tus preferencias de publicidad en cualquier momento.

Creating a keystore for plugin signing the easy way

2.584 visualizaciones

Publicado el

How to create a keystore for jar-file signing and how to export the certificate for use with Lotus Domino policies to broadcast the trust to Notes clients.

Publicado en: Tecnología
  • Sé el primero en comentar

  • Sé el primero en recomendar esto

Creating a keystore for plugin signing the easy way

  1. 1. How to create a Java keystorefor plugin signing the easy way Mikkel Flindt Heisterberg OnTime by IntraVision
  2. 2. Create the keystore• Use iKeyMan to create the keysore – <Notes>jvmbinikeyman.exe i.e. C:Notes8jvm binikeyman.exe• Create keystore of type JCEKS and specify a password for the keystore• Note the directory where you create the keystore
  3. 3. Create self-signed certificate• In ”Personal Certificates” click ”New Self- Signed...” and fill in the fields.• Make sure to adjust the validity perido of the certificate• Note the ”Key Label” you specify (here it’s ”signerkey”)• Exit iKeyman
  4. 4. Verify keystore• In a DOS prompt use the KeyTool from the JDK to verify the keystore – If you haven’t got a JDK installed use the one installed with Notes (<Notes>jvmbinkeytool.exe)• C:Notes8jvmbinkeytool.exe -keystore keystore.jck -storetype jceks -list -v
  5. 5. Verify keystore
  6. 6. Export certificate• Now export the certificate that is the certificate to verify jar-file signatures – Again using the keytool as before – This creates mycert.der which is the file you import into Domino Directory• C:Notes8jvmbinkeytool.exe -keystore keystore.jck -storetype jceks –export –file mycert.der –alias signerkey
  7. 7. Export certificate
  8. 8. Import the certificate in Domino
  9. 9. Import the certificate in Domino
  10. 10. Import the certificate in Domino
  11. 11. Import the certificate in Domino
  12. 12. Trust• Next steps are to – Cross certify the imported internet certificate with your a Notes certifier – Use policies (Security settings) to broadcast the internet certificate and cross certification of the internet certificate to Notes clients – The option is on the ”Keys and Certificates” tab under ”Administrative Trust Defaults”
  13. 13. Sign jar-file using keystore• You sign jar-files using the jarsigner.exe tool from the JDK – Again you can use the one installed with the Notes JVM if need be• C:Notes8jvmbinjarsigner.exe -keystore keystore.jck -storetype jceks –signedjar signed.jar myfile.jar signerkey
  14. 14. Sign jar-file using keystore

×