Published on Digi-Sign, The Certificate Corporation (https://www.digi-sign.com)

Home > Java Server

Java Server

By Digi-Sign
Created Feb 18 2008 - 14:49
Important Note:

Effective 1 January 2011, we will no longer support any Certificate Signing Request [CSR] generated with a 1024 bit key. This is because NIST, PKIX, WebTrust and other respective security standards no longer consider the 1024 bit key size as secure. Read more > [1]

Instructions

Creating a New Key Pair

  • Use the keytool command to create the key file:

    • keytool -genkey -keyalg RSA -keystore domain.key

  • The following questions will be asked if not known:

    • Enter keystore password: (NOTE:remember this for later use)

    • What is your first and last name? - This is the Common Name (Domain Name
    • What is the name of your organizational unit?
    • What is the name of your organization?
    • What is the name of your City or Locality?
    • What is the name of your State or Province?
    • What is the two-letter country code for this unit?
  • You will then be asked if the information is correct:

    • Is CN=www.yourdomain.com, OU=Your Organizational Unit, O=Your Organization, L=Your City, ST=Your State, C=Your Country correct?

  • When you answer 'y' or 'yes' the password is then requested:

    • Enter key password for

    NOTE:Make a note of this password
    is the default alias for the certificate

  • Use the keytool command to create the CSR file:

    • Keytool -certreq -keyalg RSA -alias yyy (where yyy is the alias name you will need to remember) -file domain.csr -keystore domain.key

  • You will be prompted to enter the password.

    • Enter keystore password:

    If the password is correct then the CSR is created.
    If the password is incorrect then a password error is displayed.

  • You will need the text from this CSR when requesting a certificate

Source URL: https://www.digi-sign.com/support/digi-ssl/java

Links:
[1] https://www.digi-sign.com/about/announcements/2048