You can use openssl to create pkcs12 keystores which work w/
bouncycastle and wss4j.
-Mike
Granqvist, Hans wrote:
- How can I create X509 *v3* certificates on the
Java side? Keytool can only create *v1*, which
does not contain SKIs.
The certs generated depend on the JCE provider. I believe
bouncycastle knows about v3 certs.
Does it have to be a Java tool?
...
- How can I import certificates that were created
on Windows into a keystore? Which keystore type
is recommended?
keytool -import? JCEKS should be the default. JKS
stores are broken.
Thanks,
Hans
