Creating Certificate Chains

Question

Hi friends,
Could any one please tell me how I could programatically create a certificate chain?
Reading through the JDK API docs, I found that there is java.security.cert.CertificateFactory.generateCertPath() and java.security.cert.CertPathBuilder.build() to build the CertPath object.
I would like to know -
a. Which among the 2 methods should be used to build a certificate chain?
b. How do I get the certificate chain into a keystore for me to use it for digital signature?
All help is most welcome.
Thanks all.

Answer 1

There's a lot of Sun documentation besides the API...
Key Management:
[http://java.sun.com/javase/6/docs/technotes/guides/security/crypto/CryptoSpec.html#KeyManagement|http://java.sun.com/javase/6/docs/technotes/guides/security/crypto/CryptoSpec.html#KeyManagement]
Signature:
[http://java.sun.com/javase/6/docs/technotes/guides/security/crypto/CryptoSpec.html#Signature|http://java.sun.com/javase/6/docs/technotes/guides/security/crypto/CryptoSpec.html#Signature]
PKI/CertPath stuff:
[http://java.sun.com/javase/6/docs/technotes/guides/security/certpath/CertPathProgGuide.html|http://java.sun.com/javase/6/docs/technotes/guides/security/certpath/CertPathProgGuide.html]
Those should help you out.