Creating a keystore for plugin signing the easy way
Upcoming SlideShare
Loading in...5
×

Like this? Share it with your network

Share

Creating a keystore for plugin signing the easy way

  • 2,341 views
Uploaded on

How to create a keystore for jar-file signing and how to export the certificate for use with Lotus Domino policies to broadcast the trust to Notes clients.

How to create a keystore for jar-file signing and how to export the certificate for use with Lotus Domino policies to broadcast the trust to Notes clients.

More in: Technology
  • Full Name Full Name Comment goes here.
    Are you sure you want to
    Your message goes here
    Be the first to comment
    Be the first to like this
No Downloads

Views

Total Views
2,341
On Slideshare
1,665
From Embeds
676
Number of Embeds
9

Actions

Shares
Downloads
23
Comments
0
Likes
0

Embeds 676

http://lekkimworld.com 639
http://www.lekkimworld.com 18
http://planetlotus.org 10
http://184.168.84.84 3
http://mobile.planetsharepoint.org 2
http://127.0.0.1 1
http://mobile.planetlotus.org 1
http://m.planetsharepoint.org 1
http://charity.planetlotus.org 1

Report content

Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel
    No notes for slide

Transcript

  • 1. How to create a Java keystorefor plugin signing the easy way Mikkel Flindt Heisterberg OnTime by IntraVision
  • 2. Create the keystore• Use iKeyMan to create the keysore – <Notes>jvmbinikeyman.exe i.e. C:Notes8jvm binikeyman.exe• Create keystore of type JCEKS and specify a password for the keystore• Note the directory where you create the keystore
  • 3. Create self-signed certificate• In ”Personal Certificates” click ”New Self- Signed...” and fill in the fields.• Make sure to adjust the validity perido of the certificate• Note the ”Key Label” you specify (here it’s ”signerkey”)• Exit iKeyman
  • 4. Verify keystore• In a DOS prompt use the KeyTool from the JDK to verify the keystore – If you haven’t got a JDK installed use the one installed with Notes (<Notes>jvmbinkeytool.exe)• C:Notes8jvmbinkeytool.exe -keystore keystore.jck -storetype jceks -list -v
  • 5. Verify keystore
  • 6. Export certificate• Now export the certificate that is the certificate to verify jar-file signatures – Again using the keytool as before – This creates mycert.der which is the file you import into Domino Directory• C:Notes8jvmbinkeytool.exe -keystore keystore.jck -storetype jceks –export –file mycert.der –alias signerkey
  • 7. Export certificate
  • 8. Import the certificate in Domino
  • 9. Import the certificate in Domino
  • 10. Import the certificate in Domino
  • 11. Import the certificate in Domino
  • 12. Trust• Next steps are to – Cross certify the imported internet certificate with your a Notes certifier – Use policies (Security settings) to broadcast the internet certificate and cross certification of the internet certificate to Notes clients – The option is on the ”Keys and Certificates” tab under ”Administrative Trust Defaults”
  • 13. Sign jar-file using keystore• You sign jar-files using the jarsigner.exe tool from the JDK – Again you can use the one installed with the Notes JVM if need be• C:Notes8jvmbinjarsigner.exe -keystore keystore.jck -storetype jceks –signedjar signed.jar myfile.jar signerkey
  • 14. Sign jar-file using keystore