R: Re: SSL & client config.

From: "devAng(at)libero(dot)it" <devAng(at)libero(dot)it>
To: <laurenz(dot)albe(at)wien(dot)gv(dot)at>, <pgsql-jdbc(at)postgresql(dot)org>
Subject: R: Re: SSL & client config.
Date: 2009-07-16 09:24:07
Message-ID: 29725999.97981247736247132.JavaMail.defaultUser@defaultHost
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-jdbc

HI,

there are the step :

>openssl req -new -text -out server.req

enter PEM
pass phrase: mypassword
verifying enter PEM pass : mypassword
..

Country name (2 letter code) : ....
..
.
......
Common Name : computer name

...
a challenge password []: empty (no password, simple return)

output
is: server.req.

follow

>openssl rsa -in privkey.pem -out server.key

enter
pass phrase for prikey.PEM: mypassword

output is: server.key

follow:

>openssl req -x509 -in server.req -text -key server.key -out server.crt

output is: server.crt

To make the server certificate available to Java
follow:

>openssl x509 -in server.crt -out server.crt.der -outform der

output
is: server.crt.der

Import this certificate into Java's system
truststore

>keytool -keystore $JAVA_HOME/lib/security/cacerts -alias
postgresql -import -file c:/Openssl/bin/server.crt.der

password of keystore:
mypassword

Error keytool: java.io.IOException: Keystore was tampered
with, or password was incorrect.

where is the error ? I'm confused.

HELP.

openssl

>----Messaggio originale----
>Da: laurenz.
albe(at)wien(dot)gv(dot)at
>Data: 15/07/2009 15.57
>A: <devAng(at)libero(dot)it>, <pgsql-
jdbc(at)postgresql(dot)org>
>Ogg: Re: [JDBC] SSL &amp; client config.
>
>devAng wrote:

>> keytool -keystore
>> $JAVA_HOME/lib/security/cacerts -alias postgresql -
import -file server.crt.der
>>
>>
>> error : Keystore was tampered with, or
password was incorrect ?
>>
>> But the
>> password is correct!!!!!!!!
>>
>>
I'm confused help-me please.
>
>Could it be that you mix up the password of the
certificate and the
>password of the Java key store?
>
>http://java.sun.
com/javase/6/docs/technotes/tools/solaris/keytool.html
>
>Yours,
>Laurenz Albe

>
>--
>Sent via pgsql-jdbc mailing list (pgsql-jdbc(at)postgresql(dot)org)
>To make
changes to your subscription:
>http://www.postgresql.org/mailpref/pgsql-jdbc
>

Responses

Browse pgsql-jdbc by date

  From Date Subject
Next Message Albe Laurenz 2009-07-16 11:44:05 Re: SSL & client config.
Previous Message Albe Laurenz 2009-07-15 13:57:03 Re: SSL & client config.