Keytool CheatSheet

================================
-----Original Message-----
From: ext Mark Thomas
Sent: Friday, January 16, 2004 5:20 PM
To: 'Tomcat Users List'
Subject: RE: Using CA-issued certificates in Tomcat 5


Try this - don't delete the alias before importing the response.

What happens is:
> keytool -genkey -alias tomcat -keyalg RSA
Creates your private and public key
> keytool -certreq -keyalg RSA -alias tomcat -file certreq.csr
wraps a copy of your _public_ key in a certficate request
> ... got the certs...
CA uses their private key to sign your public key - this is essentially your
certificate
> keytool -delete -alias tomcat
This deletes your private key. This is bad.
> keytool -import -alias root -trustcacerts -file rootcert.cer
(root/intermediate/chain cert, as appropriate for the CA)
Adds the public key of your CA to your trusted certs.
> keytool -import -alias tomcat -trustcacerts -file testcert.cer
With your private key still in place, this replaces your unsigned public key
with a signed public key

You may find that the format the cert comes back in is not compatible with
keytool. I normally do the following:
1. In windows, change extension to .cer
2. Double click on .cer file.
3. On "Details" tab click "Copy to file..."
4. Select the .p7b output format and tick the box to include all certs in path.
5. Specify a file name.
6. Use key tool to import this file.

Sorry this is a windows solution but if you don't use windows as along as you
can get access to a windows box you should be able to do this.

Mark

================================

NoroVirus at Java One 2008

Please tell me that this story is not true. I am hearing reports of attendees falling sick at the Java One Conference in Moscone Center. Apparently, Norovirus is the culprit.

http://ginasmith.typepad.com/gina_on_gina/2008/05/just-got-back-f.html

Some references are mentioned here.

Another reference is http://www.theserverside.com/news/thread.tss?thread_id=49341

This morning, I found out what was wrong. I got one of those delightful ALL CAPS emails from JavaOne informing me that we had all been the subject of a viral attack by the dreaded Norovirus. So that was it!

Seriously, Java One is quite boring if you just attend the conference. What you should look forward to is meeting your colleagues (from different parts of the world), meet your competitors, share tips from the landscape and make social/professional contacts. For that matter, any conference is boring if you do not take into effect the "Human" factor.

I hope the Virus outbreak will not dampen the spirits of frequent Java One attendees.


http://technoracle.blogspot.com/2008/05/moscone-norovirus-javaone-truth-please.html
refers to potentially serious happenings at the Moscone....

Mark Little talks about the virus outbreak in his blog post.

Where is JRockit downloads?

There is a thread on bea forums looking for JRockit downloads.
http://forums.bea.com/thread.jspa?threadID=570000807

It is not clear where the downloads for jrockit are..

You can get the patched versions of jrockit for security vulnerabilities from BEA security advisory.
http://dev2dev.bea.com/pub/advisory/277

Configure the JDK Logging

If you have code in your application, for example from third party libraries that uses the standard JDK logging, then you should be able to create a logging.properties file and pass it as a system property as in:

java -Djava.util.logging.config.file=logging.properties 

Let us take a look at a sample logging.properties.

handlers= java.util.logging.ConsoleHandler.level= INFO
java.util.logging.ConsoleHandler.level = FINER
java.util.logging.ConsoleHandler.formatter = java.util.logging.SimpleFormatter
org.something.something = FINER 
org.apache.tomcat.catalina = FINER