Generate CSR using API problem??

Question

Hi all ,
I have this piece of code below using JDK 1.3 and BouncyCastel Provider
//some other import ... i am using bouncyCastle Provider
import javax.crypto.Cipher;
import org.bouncycastle.jce.PKCS10CertificationRequest;
import org.bouncycastle.asn1.x509.X509Name;
public class test
public static void main(String []args) throws Exception
Security.addProvider(new org.bouncycastle.jce.provider.BouncyCastleProvider());
KeyStore ks=KeyStore.getInstance("JKS");
ks.load(new FileInputStream("test.keystore"),"one1234".toCharArray());
Enumeration e = ks.aliases();
X509Certificate c=null;
while(e.hasMoreElements())
String alias = e.nextElement().toString();
if(ks.isKeyEntry(alias))
c = (X509Certificate) ks.getCertificate(alias);
break;
String subject = c.getSubjectDN().getName();
X509Name xname = new X509Name(subject);
PrivateKey priv = (PrivateKey) ks.getKey("mykey","one1234".toCharArray());
PublicKey pub = (PublicKey) c.getPublicKey();
PKCS10CertificationRequest csr = new PKCS10CertificationRequest("MD5WithRSA",xname, pub,null,priv);
byte buf[] = csr.getEncoded();
FileOutputStream os = new FileOutputStream("request.crt");
OutputStreamWriter wr = new OutputStreamWriter(os);
wr.write("-----BEGIN NEW CERTIFICATE REQUEST-----\n");
wr.write(new sun.misc.BASE64Encoder().encode(buf));
wr.write("\n-----END NEW CERTIFICATE REQUEST-----\n");
wr.flush();
The coding Was OKAY and ran successfully...
The Problem is i want to get the same result as if i generate a csr using KEYTOOL utility...
BUT somehow i got different result , is it due because of signature algorithm or encoding??
Please help me ....
Thanks....
God Bless..

Answer 1

Hi,
I think you problem is a kind of bug in STRUST.
Here is the workaround, I use :
Get the Verisign certificate on your Windows PC.
Double click on the cer file, the certificate will be displayed.
Click on "Certification path", you will see your certificate, the inermediate CA certificate and the root certificate.
Double click on the Root CA certificate, click on "Details" then export it as Base 64 X.509 cer file.
Do the same for the intermediate certificate anf for you certificate.
Then with notepad concatenate the 3 files in one single file in this order :
Your certificate,
the intermediate certificate
the root certificate.
This will be a text file looking like
BEGIN CERTIFICATE-----
END CERTIFICATE-----
BEGIN CERTIFICATE-----
END CERTIFICATE-----
BEGIN CERTIFICATE-----
END CERTIFICATE-----
Now try to import this new .cer file.
It works for me !
Good luck !
Regards,
Olivier