Administrace komentářů

1. Vygeneruji rootCA (pomocí YaSTu) a exportuji certifikát do /tmp/cacert.pem a klíč do /tmp/rootCA.key

2. Import do keystore
 keytool -keystore keystore -storepass password -trustcacerts -alias rootCA -import -file /tmp/cacert.pem

3) Vygenerování klíče
keytool -genkey -keystore keystore -alias claunfish -keyalg RSA
Enter keystore password:                                                                       
Keystore password is too short - must be at least 6 characters                                 
Enter keystore password:                                                                       
What is your first and last name?                                                              
  [Unknown]:  claunfish                                                                        
What is the name of your organizational unit?                                                  
  [Unknown]:  unit                                                                             
What is the name of your organization?                                                         
  [Unknown]:  organization                                                                     
What is the name of your City or Locality?                                                     
  [Unknown]:  city                                                                             
What is the name of your State or Province?                                                    
  [Unknown]:  province                                                                         
What is the two-letter country code for this unit?                                             
  [Unknown]:  cz                                                                               
Is CN=claunfish, OU=unit, O=organization, L=city, ST=province, C=cz correct?
  [no]:  yes

Enter key password for claunfish
        (RETURN if same as keystore password):


4) Vygeneruji csr
keytool -certreq -keystore keystore -alias claunfish -file claunfish.csr -keyalg RSA
Enter keystore password:

5) Podepíši csr
openssl x509 -req -in claunfish.csr -CA /tmp/cacert.pem -CAkey /tmp/rootCA.key -out claunfish.crt -days 365 -CAcreateserial
Signature ok
subject=/C=cz/ST=province/L=city/O=organization/OU=unit/CN=claunfish
Getting CA Private Key


6) Importuji certifikát do keystore
 keytool -keystore keystore -alias claunfish -file claunfish.crt -keyalg RSA -import
Enter keystore password:
Certificate reply was installed in keystore


7) Nastavím proměné prostředí v openfire
  xmpp.socket.ssl.keypass password
xmpp.socket.ssl.keystore keystore 

8) restartuji openfire

voala:
java.security.InvalidKeyException: Supplied key (null) is not a RSAPrivateKey instance
	at org.bouncycastle.jce.provider.JDKDigestSignature.engineInitSign(Unknown Source)
	at java.security.Signature$Delegate.engineInitSign(Signature.java:1095)
	at java.security.Signature.initSign(Signature.java:480)
	at org.bouncycastle.jce.PKCS10CertificationRequest.(Unknown Source)

keytool -keystore keystore -list
Enter keystore password:

Keystore type: JKS
Keystore provider: SUN

Your keystore contains 2 entries

rootca, 24.6.2010, trustedCertEntry,
Certificate fingerprint (MD5): A5:AB:06:4F:45:1F:B3:7B:0A:45:96:B3:B5:2E:24:51
claunfish, 24.6.2010, PrivateKeyEntry,
Certificate fingerprint (MD5): 5E:24:FD:64:25:28:C2:16:85:0A:20:EF:CC:81:12:94