signing (again)

[mattvenables]

Is there anyway to test the JCE by signing my own JAR without sending
off to a CA? I thought creating a keystore, exporting a key, importing
it to cacerts, singing and running would work, but I was wrong, the JCE
needs a certificate chain. Any ideas? This is only for testing, so I
would really not like to send off for to a CA on this.

 

[iksrazal]

You can use LDAP locally with a certificate chain. The schema
InetOrgPerson supports X.509 .

Furthermore, you can indeed sign without a cert chain. Use your
Keystore to create a private key, and use that to sign. Although I
haven't used it, there is also jarsigner.

http://www.unix.org.ua/orelly/java-ent/security/ch11_02.htm

HTH,
iksrazal
http://www.braziloutsource.com/