Simple program with Java KeyTool

Question

Hello!
I tried to create signature using keytool to send data using ssl. I create private key file by
keytool -genkey -keystore kkm.kst -storepass passwd -alias kkmcert -keypass passwd -keyalg RSA -keysize 1024 -sigalg MD5WithRSA -validity 365 -dname CN=tester
and then I tried to signature string "test" by following code:
public static void getSign(){
             KeyStore keyStore = KeyStore.getInstance(KeyStore.getDefaultType());
             String keyStoreFile = "kkm.kst";
             FileInputStream fis = new FileInputStream(keyStoreFile);
             String keyStorePassword = "passwd";
             keyStore.load(fis, keyStorePassword.toCharArray());
             fis.close();
             String myKeyAlias = "kkmcert";
             String myKeyPassword = "passwd";
               PrivateKey privateKey = (PrivateKey) keyStore.getKey(myKeyAlias, myKeyPassword.toCharArray());
             if(privateKey == null) throw new Exception("Client key not found");
             String text = "test";
              Signature signature = Signature.getInstance("MD5withRSA");
              signature.initSign(privateKey);
              byte [] data;
                   data = text.getBytes("UTF-8");
             signature.update(data);
             byte [] sign = signature.sign();
             String signString = new String(sign, "UTF-8");
             System.out.println(signString);
}After that I tried to verify that derived signature isn't wrong:
keytool -import -keystore kkm.kst -storepass passwd -file certfile.cer -alias ep -noprompt
public static void checkSign(String signString){
             KeyStore keyStore = KeyStore.getInstance(KeyStore.getDefaultType());
             String keyStoreFile = "kkm.kst";
             FileInputStream fis = new FileInputStream(keyStoreFile);
             String keyStorePassword = "passwd";
             keyStore.load(fis, keyStorePassword.toCharArray());
             fis.close();
             String eportAlias = "ep";
             Certificate cert = keyStore.getCertificate(eportAlias);
             if(cert == null) throw new Exception("Server certificate not found");
             PublicKey publicKey = cert.getPublicKey();
             String text = "test";
              byte [] data;
              try {
                   data = text.getBytes("UTF-8");
              } catch (UnsupportedEncodingException e) {
                   data = text.getBytes();
              String subscriptText = signString;
              byte [] subscript = signString.getBytes();
              try {
                   Signature signature = Signature.getInstance("MD5withRSA");
                  signature.initVerify(publicKey);
                  signature.update(data);
                  System.out.println(signature.verify(subscript) ? "RIGHT": "WRONG");
              } catch (Exception e) {
                   System.out.println("Exc : WRONG");
          } catch (Exception e) {
               System.err.println("Error");
               e.printStackTrace();
}And after checking I got message "WRONG" that means that generated signature is wrong signature. =( Can anybody help me to find error?

Answer 1

hey buddy... i am stucked with one more error.
when the same code was compiled and during the running of the code it says that
error : error reading in E:\oracle\ora90\network\admin\listener.ora; java.util.zip.ZipException execption
i saw environment variable, but still for all i couldn't get rid of this problem ..needed help badly!