List of pre-installed CA certificates by Java version?

Hello all,
I am looking to find a list of all the CA certificates that came pre-installed (/lib/security/cacerts) with each version of Java since and including 1.4.2. Does anyone know if any such list exists?
The best I could come up with was this:
http://java.sun.com/j2se/1.4.2/docs/guide/security/
That document lists some certificates that were added in 1.4.2, but it is not an exhaustive list and it doesn't cover anything that was added or removed since then.
Any pointers to resources would be very helpful.
Regards,
Brandon

levhal wrote:
No.
What I need is a list of when the different root certificates was supported by Java. An example could be:
"Thawte Premium Server CA" was preinstalled since J2SE 1.3
"GlobalSign Root CA" was preinstalled since J2SE 1.4.2 update 16Write to Sun/Oracle since I doubt if anyone visiting this site has such a list or has access to the information required to create such a list.

Similar Messages

Complete list of pre-installed root certificates in Java keystore?

I need a complete list of from which version and update of JDK, J2SE, Java SE etc different root certificates are pre-installed in the keystore.
Someone that can help?

levhal wrote:
No.
What I need is a list of when the different root certificates was supported by Java. An example could be:
"Thawte Premium Server CA" was preinstalled since J2SE 1.3
"GlobalSign Root CA" was preinstalled since J2SE 1.4.2 update 16Write to Sun/Oracle since I doubt if anyone visiting this site has such a list or has access to the information required to create such a list.

Error While Installing Netweaver SP16(ABAP+JAVA Version)

Hi everyone,
I am trying to install the Netweaver SP16 but in vain. I am struck at the 11thphase(DataBase instance Creation) I had installed the J2sdk correct version which is requried. I tried five times but could not succeed.
Does anyone had face this problem, please let me know if you had any suggestions to overcome the installation problem.
Your Feedback is appreciated.
Regards
Ram

Hi,
I could solve the problem. Its because of the port number. Below line help me to solve the problem
The file C:\WINNT\system32\drivers\etc\services (Windows 2000) or C:\Windows\system32\drivers\etc\services (Windows XP) must not include an entry for the ports 3601, 3201 and 50000 to 50030. A possible entry can be excluded by using the hash symbol (#).
I am right now Having one more problem
Now it is (i think 17th step)
Log says
ERROR 2006-04-22 15:11:30
CJS-30022 Program 'Migration Monitor' exits with error code 103. For details see log file(s) import_monitor.java.log, import_monitor.log.
ERROR 2006-04-22 15:11:30
FCO-00011 The step runMigrationMonitor with step key |NW_ABAP_OneHost|ind|ind|ind|ind|0|0|NW_ABAP_Import_Dialog|ind|ind|ind|ind|10|0|NW_ABAP_Import|ind|ind|ind|ind|0|0|runMigrationMonitor was executed with status ERROR .
Can some one tell me what is the problem
regards
ram

Problem in Installing Netweaver Sneak Preview Java version

I am doing a full Local installation of the NW04 SP11 Java Sneak Preview.
I have installed J2SDK 1.4.2.09 & the loopback adaptor on MS windows 2000 SP3.
When I ran the installation of the WAS, the installer just stopped at the Step "Load Java Database Content". There is no error message neither did my system hang. But the installer just stays there and nothing happened.
Can someone please guide me through this. It's very frustrating now.
Regds
Thiru

Hi Thiru,
to which directory have you extracted the files? Give C:\temp a try because there are problems with to long Path names.
Regards
Gregor

How to run R12 Oracle E-Business Suite Pre-install Patches Report

Hi.
I have downloaded, unzipped this report as per R12 Oracle E-Business Suite Pre-install Patches Report [Video] (Doc ID 1448102.1)
What then? The instructions say
Unzip the file, extracting the entire contents, which creates the "EBS_12.1_Preinstall" folder. (The unzipped folder will use <1 MB of storage space.)
Navigate to the EBS_12.1_Preinstall folder
Open the file 'index.html' in a browser
Do not rename any of the the files in the EBS_12.1_Preinstall folder. Such an action will break the report.
But the "Index" is supposed to show what? At the moment all I see is a number of sections that have nothing in them (the other html pages, like AP etec, do provide information)
11.5.10.2
RHEL 5.5
11.2.0.3

Hi,
But the "Index" is supposed to show what? At the moment all I see is a number of sections that have nothing in them (the other html pages, like AP etec, do provide information)
Please see the FAQ section of the note. Specifically please refer quesions:
- Does the report list all types of pre-install patches available on My Oracle Support?
- Is this list of pre-install patches specific to a particular Oracle E-Business Suite release?
Thanks &
Best Regards,

JWSDP1.3 - 'pre-installed' XML deployment files

In the current JWSDP-1.3 Tutorial, there is the following text on p. 810 (chapter on JSF):
"Running the Examples Using the Pre-Installed XML Files
The Java WSDP 1.3 includes an XML file for each example application in the <JWSDP_HOME>/webapps directory. This file causes an application to be automatically deployed when you start Tomcat...."
However, in the JWSDP-1.3 (installable download), those files are not there (I have downloaded and installed it twice).
I assume this is an error. Where are these files in the v 1.3 release? How are they used? There appears to be inconsitencies between the 1.2 and 1.3 directory/file locations as indicated in the Tutorial documentation.
Thanks

You are right. The location of the context files changed in
1.3. They are now located in <jwsdp_home>/conf/Catalina/locahost.
Tom

Java -version error: could not open`C:\xml_render\java\lib\amd64\jvm.cfg

I updated my laptop to the latest recommended Java update. After installing, i tested out the install by doing a java -version. Instead of executing, i got the following error:
Error: could not open `C:\xml_render\java\lib\amd64\jvm.cfg'
i installed JRE under the C:\xml_render\java sub-directory. The Java installer did not create an amd64 sub-directory.
Have tried to troubleshoot this for a few hours, could not figure out what points to `C:\xml_render\java\lib\amd64', so i would greatly appreciate some help.
Here is version and environment info:
Windows 7
Installed 32-bit JRE
java version: 1.6_38
previously had 1.6_35, 32-bit, which i had uninstalled.

This sounds like you already had Java installed, then installed a new one, but the old one is still in your PATH, or the Windows registry is pointing to the wrong one.
follow the links...
http://forum.java.sun.com/thread.jsp?forum=54&thread=184728
http://java.sun.com/j2se/1.3/install-windows.html#Environment
good luck!

Jrockit 3.0.0-1.5.0 on Solaris 9 - coredump when executing java -version

Hi,
I installed jrrt-3.0.0-1.5.0 on a Solaris 9 virtual machine. When I set JAVA_HOME and PATH to point to the jrockit install and then execute java -version, I get a Segmentation Fault. Any idea why this would be happening? I don't see a core dump file being output so I'm not sure how to troubleshoot.
Thanks in advance for your help. We are trying to install JRockit to overcome some PermGen memory issues we are seeing while running WL 9.2.3 with Sun's Java 1.5.

Hello,
First, make sure you have followed the installation instructions with regards to OS patches etc to the letter:
http://e-docs.bea.com/platform/suppconfigs/configs/solaris/solaris9_92.html
If you still get the segfault and get a text dump (jrockit.<pid>.dump) can you post it here in its entirety? If not, I suggest that you contact Oracle Support to get help. It is possible that you have OS configuration issues or are running in an unsupported configuration (the virtualizaton setup).
Regards,
Henrik

Computers with Java pre-installed

I am working with a customer looking to purchase a numnber oif PCs for a Java application and am looking for a list of namer brand computers that come with Java pre-installed. I know Dell pre-installs Java, but they are particularly interested in HP systems. Does anyone know of a comprehensive list of PC verndors who pre-install Java, and if not, if specifically HP pre-installs?
Thanks,
Greg

Thanks for the replies. I know it is easy to install, we are a Java developer, it's just a question from my customer. This sort of information should be made readily available by Sun.
Anyone have any idea about HP?

Java.lang.IllegalStateException: INTERNAL ERROR: Global root folder for pre-installed component archives not defined.

Hi Gurus,
I am working on NWDS 7.01.00 after opening NWDS, I am getting this error. My error log file is:
java.lang.IllegalStateException: INTERNAL ERROR: Global root folder for pre-installed component archives not defined.
at com.sap.tc.devconf.impl.DevConfFileSystemLayout.getRootPathForCompartment(DevConfFileSystemLayout.java:202)
at com.sap.tc.devconf.impl.DevConfFileSystemLayout.getAbsoluteSCRoot(DevConfFileSystemLayout.java:76)
at com.sap.tc.devconf.impl.DevConfFileSystemLayout.getAbsoluteTopLevelDCsRoot(DevConfFileSystemLayout.java:169)
at com.sap.tc.devconf.impl.LocalSCNode.initializeTopLevelDCNodeList(LocalSCNode.java:41)
at com.sap.tc.devconf.impl.LocalSCNode.<init>(LocalSCNode.java:24)
at com.sap.tc.devconf.impl._Factory.createLocalSCNode(_Factory.java:385)
at com.sap.tc.devconf.impl.DevelopmentConfiguration.getTopLevelDCsForLocalCompartment(DevelopmentConfiguration.java:3415)
at com.sap.tc.devconf.impl.syncdb.ComponentSyncDB._initializeLocalEntries(ComponentSyncDB.java:788)
at com.sap.tc.devconf.impl.syncdb.ComponentSyncDB.initializeLocalEntries(ComponentSyncDB.java:759)
at com.sap.tc.devconf.impl.syncdb.ComponentSyncDB.initialize(ComponentSyncDB.java:436)
at com.sap.tc.devconf.impl.syncdb.ComponentSyncDB.retainEntriesFromCompartment(ComponentSyncDB.java:824)
at com.sap.tc.devconf.impl.LocalDCScanner.refreshSyncDBForLocalDCs(LocalDCScanner.java:103)
at com.sap.tc.devconf.impl.DevelopmentConfiguration.<init>(DevelopmentConfiguration.java:378)
at com.sap.tc.devconf.impl._Factory.createDevelopmentConfiguration(_Factory.java:354)
at com.sap.tc.devconf.Factory.createDevelopmentConfiguration(Factory.java:103)
at com.sap.tc.devconf.DevelopmentConfigurationFactory._addConfiguration(DevelopmentConfigurationFactory.java:2062)
at com.sap.tc.devconf.DevelopmentConfigurationFactory.addConfiguration(DevelopmentConfigurationFactory.java:761)
at com.sap.tc.devconf.DevelopmentConfigurationFactory.addConfiguration(DevelopmentConfigurationFactory.java:696)
at com.sap.tc.devconf.DevelopmentConfigurationFactory.addConfiguration(DevelopmentConfigurationFactory.java:667)
at com.sap.ide.eclipse.component.devconf.DevConfManager.createDefaultDevConf(DevConfManager.java:341)
at com.sap.ide.eclipse.component.devconf.DevConfManager.getInstalledDevConfs(DevConfManager.java:442)
at com.sap.ide.eclipse.component.devconf.DevConfManager.initializeDevConfs(DevConfManager.java:135)
at com.sap.ide.eclipse.component.devconf.DevConfManager.initializeDevConfs(DevConfManager.java:109)
at com.sap.ide.eclipse.component.provider.ComponentProviderPlugin$1.run(ComponentProviderPlugin.java:82)
at org.eclipse.swt.widgets.RunnableLock.run(RunnableLock.java:35)
at org.eclipse.swt.widgets.Synchronizer.runAsyncMessages(Synchronizer.java:98)
at org.eclipse.swt.widgets.Display.runAsyncMessages(Display.java:1999)
at org.eclipse.swt.widgets.Display.readAndDispatch(Display.java:1733)
at org.eclipse.ui.internal.Workbench.runEventLoop(Workbench.java:1402)
at org.eclipse.ui.internal.Workbench.run(Workbench.java:1385)
at com.tssap.util.startup.WBLauncher.run(WBLauncher.java:79)
at org.eclipse.core.internal.boot.InternalBootLoader.run(InternalBootLoader.java:858)
at org.eclipse.core.boot.BootLoader.run(BootLoader.java:461)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at com.sap.ide.eclipse.startup.Main.basicRun(Main.java:291)
at com.sap.ide.eclipse.startup.Main.run(Main.java:789)
at com.sap.ide.eclipse.startup.Main.main(Main.java:607)

Maybe some plugins are missing. Try reinstall the latest version of the nwds that matches to you server version.
http://wiki.scn.sap.com/wiki/display/Java/NWDS+Download+Links

What are pre-requisite softwares to be installed to start working JAVA?

HI ALL,
Greetings.
Would you pls. let me know what are pre-requisite softwares to be installed to start learning with JAVA? I have completed OCA certification and now i want to start learning JAVA so that i can develop front end database application. I have no other language experience other than PL/SQL.
Pls. let me know what the primary and essential softwares to be installed to start learning java to suit my desired objective as mentioned above.
Thanks in advance.

Follow this trail - http://java.sun.com/docs/books/tutorial/getStarted/ .

Steps to create your own self signed certificate with java plugin working

You need two tools that comes with your jdk which are keytool and jarsigner.
Steps explain below in detail. Don't use netscape signtool, it will NEVER work!
* keytool -genkey -keyalg rsa -alias tstkey -keypass 2br2h2m -dname "cn=Test Object Signing Certificate, o=AI Khalil, ou=Java Products, c=AU"
cn = Certificate name
o = organistation
ou = organistation unit
c = country (first two letters)
If don't put the -dname, you can fill it line by line.
The -keypass has to be verify at the end, and you have to wait for it to create the rsa signing keys.
On NT by default it will put the alias information at D:\WINNT\Profiles\Administrator (if log in as administrator) with the default file called ".keystore". Windows 98 etc, don't know, search for .keystore
file. When you update it, check for the timestamp change and you know if you at the right spot.
You can store your alias information via the -storepass option to your current directory you work on, if you don't want to update the default .keystore file?
The .keystore contains a list of alias so you don't have to do this process again and again.
Another tip if you want your certificate encryption validity to be more than the default one month is simply
add the -validity <valDays>, after the -genkey option, to make your certificate usage for encryption to last much longer.
Note: You MUST use the -keyalg rsa because for starters the rsa encyption alogorthim is supported on ALL browsers instead of the default DSA and the other one SHA. Java plugins must work with the RSA algorthim when signing applets, else you will get all sorts of weird errors :)
Do not use signtool because thats a browser dependant solution!! Java plugin is supposed to work via running it owns jre instead of the browser JVM. So if you going to use netscape signtool, it starts to become a mess! ie certificate will install, but applet won't start and give you funny security exception errors :)
* keytool -export -alias tstkey -file MyTestCert.crt
It will read the alias information in the .keystore information picking up the rsa private/public keys info and
create your self sign certificate. You can double click this certificate to install it? But don't think this step is needed but maybe for IE? Someone else can check that part.
If you make a mistake with the alias, simply keytool -delete -v -alias <your alias key>
If not in default .keystore file, then simply keytool -delete -v -alias <your alias key> -keystore <your keystore filename>
* Put your classes in your jar file, my example is tst.jar.
* jarsigner tst.jar tstkey
Sign your testing jar file with your alias key that supports the RSA encryption alogorthim.
* jarsigner -verify -verbose -certs tst.jar
Check that its been verified.
The last step is the most tricky one. Its to do with having your own CA (Certified Authority) so you don't
have to fork out money straight away to buy a Verisign or Twarte certificate. The CA listing as you see in
netscape browsers under security/signers, is NOT where the plugin looks at. The plugin looks at a file called
CACERTS. Another confusion is that the cacerts file is stored in your jre/lib/security AND also at your
JavaSoft/Jre/<Java version>/lib/security. When you install the Java plugin for the first time in uses your
JavaSoft folder and its the cacerts file that has to be updated you add your own CA, because thats where
the plugin look at, NOT THE BROWSER. Everything about plugin is never to do with the browser!! :)
* keytool -import -file MyTestCert.crt -alias tstkey -keystore "D:\Program Files\JavaSoft\JRE\1.3.1\lib\security/cacerts"
Off course point to your own cacerts file destination.
Password to change it, is "changeit"
Before you do this step make a copy of it in its own directory in case you do something silly.
This example will add a CA with alias of my key called "tstkey" and store to my example destination.
* keytool -list -v -keystore "E:/jdk/jdk1.3/jre/lib/security/cacerts"
List to see if another CA is added with your alias key.
Your html, using Netscape embed and Internet explorer object tags to point to the java plugin,
your own self sign applet certificate should work
Cheers
Abraham Khalil

I follow Signed Applet in Plugin, and it's working on
my computer. Thanks
But When I open my applet from another computer on
network, why it does not work ..?
How to make this applet working at another computer
without change the policy file ..?
thanks in advance,
AnomYou must install the certificate on that computers plugin. Can this be done from the web? can anyone suggest a batch file or otherwise that could do this for end users?
I want a way for end users to accept my cert as Root or at least trust my cert so I dont have to buy one. I am not worried about my users refusing to accept my cert. just how do I make it easy for them? IE you can just click the cert from a link, but that installs for IE, and not the plugin where it needs to be.

What is on your Pre Installed OS?

Something to think about:
http://www.bbc.com/news/technology-31533028
------------------------------ >> Computer maker Lenovo has been forced to remove hidden adware that it was shipping on its laptops and PCs after users expressed anger.
The adware - dubbed Superfish - was potentially compromising their security, said experts.
The hidden software was also injecting adverts on to browsers using techniques more akin to malware, they added.
Lenovo faces questions about why and for how long it was pre-installed on machines - and what data was collected.
The company told the BBC in a statement: "Lenovo removed Superfish from the preloads of new consumer systems in January 2015. At the same time Superfish disabled existing Lenovo machines in the market from activating Superfish. << ------------------------------
My machine, a W540 was clean, no Superfish. But think carefully. Is it not to someone's advantage to have a permanent boot up to the Internet? Hence no physical switch. Before the desktop is fully active, the link is already in dialog mode with external servers.
To view certificates; Instructions: MS View Certificates Instructions
Due to the lack of a physical WiFi disconnect switch, Adobe zapped my PS and PS CC, and took me 3 days (many hours on line with direct access to my machine connected on a hotel's WiFi) to resolve the issue with Adobe tech support (it was free, and I got a free course in Indian), and Adobe messed up the HiRez screen in the process. The screen problem took 3 weeks to resolve when I got back from a photo field shoot.

To remove a real danger (shame on Lenovo!!)
Run certmgr.msc to start your Certificate Manager
Once that opens, click on “Trusted root certificate authorities” in the left-hand navigation pane, then double-click “Certificates” in the main pane.
A list of all trusted root certificates will appear.
Find the Superfish entry, then right-click on it and select “Delete.”

Problem installing SSL certificate for CPS

I work at a medium-sized University, and we have used
Contribute 3 with CPS1.11 for well over a year. Recently, however,
the Contribute clients began having difficulty logging in to CPS.
At first this was intermittent, but is now constant. Adobe support
suggested replacing the CPS self-signed SSL certificate with a
genuine one, because apparently the self-signed certificate is
causing communication delays and timeouts.
I have the certificate, and am trying to use keytool (see
http://java.sun.com/j2se/1.4.2/docs/tooldocs/windows/keytool.html)
to install it, but it is asking me for a keystore password, which I
don't know. Apparently the standard defaults are "changeit" or
"passphrase", but neither of these work.
As a test, I created a fresh install of CPS and attempted to
list the keys in the keystore, but again was asked for a keystore
password and the defaults did not work. Adobe support suggested I
ask here. Anybody have any experience installing a certificate for
CPS?

Are you sure that the certificate needs to be installed to all users? Can you provide more details about the certificate and its purposes?
My weblog: en-us.sysadmins.lv
PowerShell PKI Module: pspki.codeplex.com
PowerShell Cmdlet Help Editor pscmdlethelpeditor.codeplex.com
Check out new:
SSL Certificate Verifier
Check out new:
PowerShell FCIV tool.

Step by Step instructions importing Client Certificates on Java Engine

Hi All,
I am trying to configure a <b>Receiver</b> SOAP adapter with SSL, does anybody has step-by-step procedure on how to install the client certificates on Java Engine using Visual Administrator? and refer that keystore in SOAP adapter?
PI 7.0 SP 09
UNIX-Sun Soloris.
Thanks,
Laxman

Hey Molugu,
you shouldn't have to install the client certificates on KeyStorage Service, for receiver adapters. The server's public certificate is sent just in the SSL handshaking. What you should have is the certificate authorization tree in your Trusted ACs Service (if the issuer of your client's certificate is not already there).
You need to install client certificates in sender adapters, when your client uses authentication through certificate. Then you need to install that authentication certificate for the authorized users.
Check the following link for SSL on J2EE: http://help.sap.com/saphelp_nw2004s/helpdata/en/f1/2de3be0382df45a398d3f9fb86a36a/frameset.htm
Regards,
Henrique.

List of pre-installed CA certificates by Java version?

Similar Messages

Maybe you are looking for