This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthor

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Page revision history

Version Date Modified Size Author Changes ... Change note

Page References

Incoming links Outgoing links

Version management

Difference between version and

At line 1 added 17 lines
!!! Overview[1]
[{$pagename}] ([JKS]) is a [Trust Anchor Store] either [authorization] [certificates] or [Public Key] [certificates]
[{$pagename}], by default uses the filename extension of [jks|JKS] and is managed by [Keytool]
[{$pagename}] manages different types of [certificate] entries. There are three basic types of [{$pagename}] entries:
* KeyStore.PrivateKeyEntry - This type of entry holds a cryptographic [Private Key], which is optionally stored in a protected format to prevent unauthorized access. It is also accompanied by a [Certificate Chain] for the corresponding [Public Key]. Private keys and certificate chains are used by a given entity for self-authentication. Applications for this authentication include software distribution organizations which sign JAR files as part of releasing and/or licensing software.
* KeyStore.SecretKeyEntry - This type of entry holds a [cryptographic] SecretKey, which is optionally stored in a protected format to prevent unauthorized access.
* KeyStore.TrustedCertificateEntry - This type of entry contains a single [Public Key] Certificate belonging to another party. It is called a [Trusted Certificate] because the [{$pagename}] owner trusts that the [Public Key] in the [certificate] indeed belongs to the identity identified by the [subject|Certificate Subject] (owner) of the [certificate]. This type of entry can be used to authenticate other parties.
[Java] typically uses two different [{$pagename}]s
* [Keystores] - is a [{$pagename}] that contains [Private Keys] and [certificates] used by [TLS]/[SSL] [servers] or [clients] to authenticate themselves to [TLS]/[SSL] others. By convention, such files are referred to as keystores. (KeyStore.PrivateKeyEntry) There is no specific location published as we can determine.
* [Truststores] - is a [{$pagename}] where [certificates] of trusted [TLS]/[SSL] [servers], or of [Certificate Authorities|Certificate Authority] [trusted] to identify others. There are __NO__ [Private Keys] in the truststore. (default is $[JAVA_HOME]/jre/lib/security/cacerts)
!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]