Help with X.509 certificate instalation

Question

Hi all..
We had exported a X.509 certificate from a https site form one of our vendors...
then we imported this file using the keytool command as shown...
keytool -import -alias [AliasgoesHere] -file /tmp/[filename].cer -keystore ticketKeyStore -storepass [mypassword]
Then in the VA we uploaded it into the TrustedCAs.
However, when we run a webservice that shall use this certificate we are receiving the error... "unknown certificate"
Anyone know if we are missing any steps???

Answer 1

Hi Kerubon,
you will need the following JAR-Files to resolve the imports (only at development time):
- keystore_api.jar
- tc_sec_ssf.jar
For runtime you define the following sharing references if you do not want to deploy the jars with your application (SAPJ2EE::interface:keystore_api, SAPJ2EE::library:security.class)
Here's the code:
try {
  // get profile from keystore service of J2EE engine
  InitialContext ctx = ctx = new InitialContext();
  Object o = (Object) ctx.lookup("keystore");
  KeystoreManager manager = (KeystoreManager) o;
  KeyStore ks = manager.getKeystore("DEFAULT");
  String alias = "TEST-cert";
  SsfProfileKeyStore profile = new SsfProfileKeyStore(ks, alias, null);
  // Here you can fetch the certificate from the profile or do stuff with your certificate
  String SubjectDN = profile.getCertificate().getSubjectDN().getName();
} catch (Exception Ex) {
  Ex.printStackTrace();
Make sure you access the DEFAULT Keystore so you won't get into trouble with permissions (I suggest you store your certificates in DEFAULT)
Note that when creating a certificate you will mostly get 2 entries (PRIVATE KEY and certificate entry). Make sure that for alias you use the name of the PRIVATE KEY entry that also contains the certificate!
Hope this helps (Please reward points if helpful)
Cheers