Sagewire Logo

Lost keystore but have cert signing request and response

3 Message(s) by 2 Author(s) originally posted in java security


From: stilllearning Date:   Wednesday, April 11, 2007
I have a certificate signing request file and a signed certificate
response from Verisign. I also have the passwords. Can someone show me
how to create a key tool keystore with my key in it?


From: sgoo Date:   Thursday, April 12, 2007
wrote in message:
I have a certificate signing request file and a signed certificate
response from Verisign. I also have the passwords. Can someone show me
how to create a keytool keystore with my key in it?



No way.

Inside the keystore there's the private key, which is very critical to
you and not computable from the public key (inside the certificate).

Also, you need to revoke this new certificate, especially if the
keystore is lost and in the hand of someone else,


From: stilllearning Date:   Thursday, April 12, 2007
wrote in message:
wrote in message:
> I have a certificate signing request file and a signed certificate
> response from Verisign. I also have the passwords. Can someone show me
> how to create a keytool keystore with my key in it?
No way.
Inside the keystore there's the private key, which is very critical to
you and not computable from the public key (inside the certificate).
Also, you need to revoke this new certificate, especially if the
keystore is lost and in the hand of someone else,



Thank you for the info. I was under the impression that the CSR
contains the private key also. In any case, I resolved the issue. I
did have a keystore but I wasn't able to import Verisign's response,
so I thought the keystore is corrupt. But it turns out that I hadn't
put in the intermediate and root Verisign CA certs in the keystore
before importing the certificate. Once I put in the two CA certs, I
was able to import the Verisign response certificate.



Next Message: interesting applet security problem



Programming | Sports | Autos

copyright 2006
Valid XHTML 1.0 Transitional