{"id":53,"date":"2012-04-10T21:50:27","date_gmt":"2012-04-10T20:50:27","guid":{"rendered":"http:\/\/www.voldrich.net\/?p=53"},"modified":"2020-03-27T17:00:21","modified_gmt":"2020-03-27T15:00:21","slug":"x509-certificates-in-few-links","status":"publish","type":"post","link":"https:\/\/www.voldrich.net\/index.php\/2012\/04\/10\/x509-certificates-in-few-links\/","title":{"rendered":"x509 certificates in few links"},"content":{"rendered":"<p>Certificates were always a little fleeing mistery to me. I always wanted to know more about them and never found the time. Few weeks back I finally kicked myself and spend one day with the certificates, signatures, signing and all that jazz. Here is a list of excelent sources.<\/p>\n<p><!--more--><\/p>\n<p>Excelent intro description into certificates can be found suprisingly on Oracle documentation website for keytool application under section certificates:<\/p>\n<p><a href=\"http:\/\/docs.oracle.com\/javase\/1.4.2\/docs\/tooldocs\/windows\/keytool.html\">http:\/\/docs.oracle.com\/javase\/1.4.2\/docs\/tooldocs\/windows\/keytool.html<\/a><\/p>\n<p>It contains definitions of elementary terms along with good explanation. It also shows you how the operations can be done using keytool &#8230; a command line utility for managing keys and key stores. Keytool is nice, but it&#8217;s a little cumbersome to use. Replace it with excelent GUI application Keystore Explorer:<\/p>\n<p><a href=\"http:\/\/www.lazgosoftware.com\/kse\/index.html\">http:\/\/www.lazgosoftware.com\/kse\/index.html<\/a><\/p>\n<p>Java in its basic installation package does not allow to create \/ handle keys with larger lengths using Java cryptography API. You need to install patch:<\/p>\n<p><a href=\"http:\/\/www.oracle.com\/technetwork\/java\/javase\/downloads\/jce-6-download-429243.html\">http:\/\/www.oracle.com\/technetwork\/java\/javase\/downloads\/jce-6-download-429243.html<\/a><\/p>\n<p>The Keystore Explorer guides you to install this patch step by step in a nice interactive drag and drop style.<\/p>\n<p>Simple important things to remember:<\/p>\n<ul>\n<li>Certificate is a implementation of digital signature. I consists of private key which is used to sign messages and public key which is used to verify the signature.<\/li>\n<li>Signature in x509 \u00a0certificate is represented by DN (distinquished name)<\/li>\n<li>Certificates can be issued (signed) by a third party (certificate authority).<\/li>\n<li>Certificate can also be self signed (Issuer DN = Certificate DN). How to validate self signed certificate:\n<ul>\n<li>Generate a self signed certificate.<\/li>\n<li>Export certificate public key. Send it to recipient.<\/li>\n<li>Generate message, sign it with your private key.<\/li>\n<li>Send message to recipient<\/li>\n<li>Recipient verifies signature with public key<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Certificates were always a little fleeing mistery to me. I always wanted to know more about them and never found the time. Few weeks back I finally kicked myself and spend one day with the certificates, signatures, signing and all that jazz. Here is a list of excelent sources.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"templates\/template-full-width.php","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[6],"class_list":["post-53","post","type-post","status-publish","format-standard","hentry","category-development","tag-security"],"_links":{"self":[{"href":"https:\/\/www.voldrich.net\/index.php\/wp-json\/wp\/v2\/posts\/53","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.voldrich.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.voldrich.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.voldrich.net\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.voldrich.net\/index.php\/wp-json\/wp\/v2\/comments?post=53"}],"version-history":[{"count":1,"href":"https:\/\/www.voldrich.net\/index.php\/wp-json\/wp\/v2\/posts\/53\/revisions"}],"predecessor-version":[{"id":709,"href":"https:\/\/www.voldrich.net\/index.php\/wp-json\/wp\/v2\/posts\/53\/revisions\/709"}],"wp:attachment":[{"href":"https:\/\/www.voldrich.net\/index.php\/wp-json\/wp\/v2\/media?parent=53"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.voldrich.net\/index.php\/wp-json\/wp\/v2\/categories?post=53"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.voldrich.net\/index.php\/wp-json\/wp\/v2\/tags?post=53"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}