Módosítások

LDAP kliens SSL

1 808 bájt hozzáadva, 2007. július 5., 11:09
Java
== Java ==
A Java VM alapértelmezetten a <code>$JRE_HOME/lib/security/cacerts</code> fájlban keresi a megbízható CA-kat.
 
Új megbízható CA hozzáadása a truststore-ba:
root@idp:/usr/jdk# <b>./bin/keytool -import -trustcacerts -alias "niifldapca" -file /tmp/niif_ldap_ca.pem \
-keystore ./jre/lib/security/cacerts </b>
Enter keystore password: <b>changeit</b>
Owner: CN=National Information Infrastructure Development Program CA, O=NIIF, C=HU
Issuer: CN=National Information Infrastructure Development Program CA, O=NIIF, C=HU
Serial number: 1
Valid from: Mon Sep 02 01:00:00 CEST 2002 until: Fri Sep 02 01:00:00 CEST 2022
Certificate fingerprints:
MD5: 9C:FD:1C:85:50:56:59:54:EE:63:2B:98:F4:C9:38:72
SHA1: 8A:F5:FB:C1:EA:58:F6:D3:B8:4D:3B:3A:76:39:E8:76:4F:DD:07:54
Signature algorithm name: SHA1withRSA
Version: 3
Extensions:
#1: ObjectId: 2.5.29.15 Criticality=true
KeyUsage [
DigitalSignature
Key_CertSign
Crl_Sign
]
#2: ObjectId: 2.5.29.19 Criticality=true
BasicConstraints:[
CA:true
PathLen:2147483647
]
#3: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 0C D6 26 D4 2F BA C9 B4 DD 25 B8 1E CF EF ED 5B ..&./....%.....[
0010: 9F D2 94 F9 ....
]
]
#4: ObjectId: 2.16.840.1.113730.1.1 Criticality=false
NetscapeCertType [
SSL CA
S/MIME CA
Object Signing CA]
#5: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: 0C D6 26 D4 2F BA C9 B4 DD 25 B8 1E CF EF ED 5B ..&./....%.....[
0010: 9F D2 94 F9 ....
]
]
Trust this certificate? [no]: <b>yes</b>
Certificate was added to keystore
 
Jelszó: '''changeit''' (ez a default Java keystore password)
 
== Tomcat ==
???

Navigációs menü