Different passwords for KeyStore and Key entry

I am having trouble using a keystore whose entries have passwords that are different from both each other, and the keystore itself. I have managed to get this (differing storepass, and keypass) working for the case of a single entry, but this case is pointless since it is the same as having a new keystore for each user. It also works fine in the case that multiple key entries share a password that is different from the keystore. However, when I place a new key entry with a different password into the keystore I get an UnrecoverableKeyException upon initialization of the KeyManagerFactory.
There seems to be some sort of restriction that the key entries should all share the same password.
I have found several articles and texts that touch on this, but the details are fuzzy. Has anyone else ever tried to do this? Will you offer some insight? When multiple users have access to the same machine should they share a keystore, or is keeping a separate keystore file for each user the standard?
Thank you for any assistance.

Pankaj,
Thank you for your reply. I also have not seen the problems when manipulating the keys with keytool. However, when selecting a key through the KeyManager I get problems.
I have wrapped the default KeyManager with another KeyManager which captures the calls to chooseClientAlias, and getPrivateKey so that I may use the key's password rather than the one that was used to load the keystore. The problem seems to arise before this.
I get an UnrecoverableKeyException at the time that the KeyManagerFactory is initialized. I don't know what the KeyManagerFactory initialization method is doing with the password. Do you know where I might find the code for this? My debugger just gives me function defs. I think that I need to supply a custom KMF, but it would be nice to know what the default one is doing first.
I noticed that you have authored a book on j2ee security. Does it cover this?
Ethan

Similar Messages

  • After change to Mavericks my Mac become too slow e I can't use it because stays asking passwords for "talagent" and "messages agent" as icloud keys. I got changed the icloud password many times and still doesn't work. I can't open any program.

    After change to Mavericks my Mac become too slow e I can't use it because stays asking passwords for "talagent" and "messages agent" as icloud keys. I got changed the icloud password many times and still doesn't work. I can't open any program.

    Back up all data.
    Launch the Keychain Access application in any of the following ways:
    ☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
    ☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
    ☞ Open LaunchPad. Click Utilities, then Keychain Access in the icon grid.
    Select the login keychain from the list on the left side of the Keychain Access window. If your default keychain has a different name, select that.
    If the lock icon in the top left corner of the window shows that the keychain is locked, click to unlock it. You'll be prompted for the keychain password, which is the same as your login password, unless you've changed it.
    Right-click or control-click the login entry in the list. From the menu that pops up, select Change Settings for Keychain "login". In the sheet that opens, uncheck both boxes, if not already unchecked.
    From the menu bar, select
    Keychain Access ▹ Preferences ▹ First Aid
    If the box marked Keep login keychain unlocked is not checked, check it.
    Select
    Keychain Access ▹ Keychain First Aid
    from the menu bar and repair the keychain. Quit Keychain Access.

  • Can you have different passwords for mail account and ICloud?

    Can you have different passwords for mail account and ICloud?

    Yes - you want to go under Notifications, Mail.   Set each acct the way you want.

  • I have only one ID, but I have different passwords for my iPhone and iPad. How to fix that?

    I have only one ID, but I have different passwords for my iPhone and iPad. How to fix that?

    Hi Cristigil,
    Are you talking about your lock screen passcode? If so, go into Settings>General>Passcode Lock, and Change one of your Passcodes to match the other.
    Hope this helps!
    Cheers,
    GB

  • Can I have separate password for appstore and icloud email account?

    Can I have other password for appstore and icloud email account? Me and my girlfriend have iphones and i would like to share my apps with her, but i dont want to give her possibility to acces my email account....

    Well you can only have a different password if you are going to use a different Apple ID

  • For printer LaserJet Profession​al CM1410 any chance to set printing password for windows and MAC

    Dear All
    for printer  LaserJet Professional CM1410 any chance to set printing password for windows and MAC?please help?

    What Windows OS are you using?  Are you networked?
    If you are networked, you have to setup your file and print sharing options in order to require password assess.  If you are just trying to control specific files from being printed, you can do that, too.
    If you are just trying to control the amount of printing off of a single PC with a printer, you could setup different accounts for each user and limit their access. 
    Some of the commercial printers can have password options, but I do not find any password options for the CM 1410, other than what I provided earlier.
    If I have been helpful, a Kudo is always appreciated.

  • I forgot my password for iMac and don´t know how to iniciate it. I don´t have the CD to do it....

    I forgot my password for iMac and don´t know how to iniciate it. I don´t have the CD to do it....Anyone could help me?

    Resetting or changing a password:
    For Snow Leopard or earlier:  http://support.apple.com/kb/HT1274
    For Lion or later:  http://support.apple.com/kb/HT6022
    This is also useful:
    http://www.macworld.co.uk/ipad-iphone/news/?newsid=3463233&olo=email
    If it's running Mac OS X 10.6.8 or earlier, insert a Mac OS X install DVD, restart with the Option key held down, click on it, and use the Reset Password utility.
    If it's running Mac OS X 10.7 or newer, restart with the Command and R keys held down, open the Terminal, and use the resetpassword command:
    https://discussions.apple.com/docs/DOC-4101
    If you are in the US call Apple Customer Support 1-800-767-2775, provide the Serial Number and specifications of the Mac, and for a reasonable fee, they will supply a replacement set of system discs (if available).
    The discs will be for the original version of the OS that was pre-installed when the Mac was manufactured.
    If you are in another country:
    http://support.apple.com/kb/HE57
    If you are running Lion or Mountain Lion you won’t have been given disks. Instead you use the recovery partition or internet recovery:
    http://support.apple.com/kb/HT4718

  • How do we reset password for SAP* and DDIC user in SAP R/3 ECC 6.0?

    Hi,
    How do we reset password for SAP* and DDIC user in SAP R/3 ECC 6.0?
    I tried with acual method as below from client '000':
    DELETE FROM USR02 CLIENT SPECIIED WHERE BNAME = 'SAP*' AND MANDT = '001'.
    After this when I tried to logon '001' using SAP* with password PASS it is giving  the message that Incorrect logon and password.
    (Also when I checked for 'SAP*' in 001 it looks like it is not got created as I queried as below:
    SELECT SINGLE * FROM USR02 CLIENT SPECIFIED WHERE BNAME = 'SAP*' AND MANDT = '001'.)
    Can anybody throw some light on this? RewardS is guranteed for solutions!
    -B S B

    Hi again:
    I forget to tell.
    You must restart the system. So, that a new user with the name "sap*" gets generated with password "pass"
    Hope this wil help,
    Eric

  • HT5243 how do I find my password for adobe and Java

    how do I find my password for adobe and Java

    "Java" doesn't have a password, unless you mean your admin password for installing software. That's whatever password you (or the person who set your computer up) used to set up your admin account. That's the same password that you use when you start up the computer if you get asked for one. You cannot retrieve this password if you've forgotten it, but you can reset it and make a new one. See this support article if that's the case:
    http://support.apple.com/kb/PH14325
    "Adobe" is a company and likewise doesn't have a password. However, if you have Adobe cloud-based software you may well have set up a password with them. Adobe also require an account and password for downloading certain products. You'll need to contact Adobe to retrieve any such password if you've lost it.
    Try
    Adobe ID, sign-in, and account help

  • Setting mail with Cox (or other services with different servers for pop and smtp)

    My Cox mail account uses different servers for pop and smtp (my personal ISP 1&1 does too).
    The mail applet on my Blackberry Curve 8330 with Verizon does not allow to define different servers for pop and smtp, and further, for SSL smtp mail, the port is fixed at 995 and cannot be changed, while Cox (and 1&1) want to use 587 or something like that.
    As a result, I can only receive mail with these services.
    I also have yahoo mail, which works fine, so I can send mail with it and it is not a life-and-death situation, but I would like to be able to just reply to email sent to my Cox address.
    I called Verizon and they said BlackBerry provides the mail access through their servers and the applet, so there is nothing they can do.
    Is there a way to set it such that I can not only receive but also send mail through either of these services?
    Thanks in advance,
    Didier
    PS: Other than that, the Curve on Verizon rocks!!! so much better down here than AT&T it's not even funny.

    OK, thank you for the input.
    The problem I have with this solution is like the one I have now using yahoo.
    There are 2 problems:
    1) mailing lists want the mail to come from the account that is subscribed, so if the cox account is subscribed, I can't contribute from the blackberry, and if the blackberry account is subscribed, I don't get my mail in Outlook. Neither is good for me.
    2) people who send me mail to the Cox account and get replies from me from the blackberry continue responding to the account that can send from the blackberry (not Cox), and from that point on I do not have that mail on the computer.
    The issue of having two copies is no big deal, I just delete the mail I do not need. I would rather have two than none.
    Really, Blackberry should modify the email service so that they directly support mail systems like those of Cox and 1&1. I am sure there are others. They should also allow the use of another port for SSL than 995. I have not seen anyone using 995 for SSL.
    Until recently, I had a BB provided by my employer, and we had a BES, and that worked really well. I would like to emulate as much of that functionality as possible without having to pay somebody another $10 or $20 a month just for the priviledge of having an account on a private BES server.
    Anyway, thanks for the exchange and suggestions.
    Didier

  • I see that many people have already complained about Itunes' backup encryption. I NEVER set a password for it (and the corresponding option is still unticked, as always) yet it asked me for a pwd when I upgraded my 3GS to the 5.0 OS. How to solve this?

    I see that many people have already complained about Itunes' backup encryption. I NEVER set a password for it (and the corresponding option is still unticked, as always) yet it asked me for a pwd when I upgraded my 3GS to the 5.0 OS. How to solve this?

    To prevent others from reading your mail, don't give them access to your account. If others need to use your computer for some reason, set up personal accounts, or a guest account, and switch to it before allowing them access. This is the simplest, and most effective, method.
    Email message files can be read as plain text in TextEdit or any word processor.
    To protect your email messages from being viewed by others while in your account, you would have to lock the folder, putting it into an encrypted disk image that required a password to be opened and mounted. You would have to double-click on the image and give your password to mount it before launching Mail then unmount it as soon as you're done. My guess is that you could replace the ~/Library/Mail folder with an alias pointing to the folder on the disk image.
    It may work, but it seems like a lot of unnecessary hassle.

  • Is it possible to play different sounds for emails and instant messages ?

    Hello,
    I was wondering if it was possible to play different sounds for emails and instant messages. I am using Thunderbird quite often with both emails and instant messages imported from Gtalk.
    I think it would be very convenient to be able to distinguish both sounds as they do not imply the same things.
    Thank you very much.
    Olivier Hubert.

    There are only six chat add-ons, three of them are about notifications. Pick one you think will do the job for you. https://addons.mozilla.org/en-US/thunderbird/extensions/chat/?sort=popular

  • I was trying to change my password and somehow it automatically reset the password for me and I closed the window and now I can't log in. What do I do?

    I was trying to change my password and somehow it automatically reset the password for me and I closed the window and now I can't log in. What do I do?

    HI,
    This post in in iChat (forum) but I have no idea from what you posted if it is about iChat and if so what account type you were changing the password on.
    9:25 PM      Wednesday; June 12, 2013
      iMac 2.5Ghz 5i 2011 (Mountain Lion 10.8.4)
     G4/1GhzDual MDD (Leopard 10.5.8)
     MacBookPro 2Gb (Snow Leopard 10.6.8)
     Mac OS X (10.6.8),
     Couple of iPhones and an iPad
    "Limit the Logs to the Bits above Binary Images."  No, Seriously

  • Can I have differnet passwords for itunes and icloud

    Can I have different passworkds for itunes and icloud

    No but you can create separate Apple IDs. One for iTunes and one for iCloud.

  • I check the box to "Remember the password for sites" and the check keeps disappearing.

    I check the box to "Remember the password for sites" and the check keeps disappearing. Each time I open the Security page in Options the check box is clear. I'd like it to stay checked.

    See:
    * http://kb.mozillazine.org/Preferences_not_saved
    Start Firefox in <u>[[Safe Mode]]</u> to check if one of the extensions is causing the problem (switch to the DEFAULT theme: Firefox (Tools) > Add-ons > Appearance/Themes).
    * Don't make any changes on the Safe mode start window.
    * https://support.mozilla.com/kb/Safe+Mode
    * https://support.mozilla.com/kb/Troubleshooting+extensions+and+themes

Maybe you are looking for

  • Client-side handler: static config?

    I would like to provide a client-side JAX-RPC handler that would be invoked without any modification to existing client code. The idea is that user's would only need to modify a config file (something like the web-services.xml file, but on the client

  • CO01 production order : Enhancement

    Hi, There is requirement to set the 'user status' while creation of Production Order,we have the Bapi to set the user staus. That needs the PO number to be passed. Can you tell us enhancement option to call th BAPI during the Save of Production order

  • QinQ in g.8032 ring with ASR901 and ME3600X

    Hi Everyone, I'd like to share with you an issue that I'm facing on ASR901 platform. I'm just trying to set up a simple QinQ configuration over a g.8032 Ethernet Ring but I have troubles with MSTP and I don't understand why... Here is the configurati

  • Acquisition analogique 9205 et châssis Wifi 9163 WLS

    Bonjour, Une question technique. Je souhaiterai pouvoir utiliser des cartes d'acquisition (9205, 9225, 9239 etc) dans un châssis Wifi. Certaines ne fonctionnement pas dans ce type de châssis, j'ai pu remarquer. http://zone.ni.com/devzone/cda/tut/p/id

  • 4506 and IPV6 Unicast

    Good morning - Recently I've had the pleasure of dealing with my corporate network ( and all remote sites) coming to a screeching halt.  It turns out that new Lenovo and HP laptops have a "bug" where they flood out multicast traffic when IPV6 is enab