forum.bitel.ru
http://forum.bitel.ru/

HTTPS и сертификаты
http://forum.bitel.ru/viewtopic.php?f=22&t=2867
Страница 1 из 1

Автор:  survivor [ 10 сен 2009, 20:27 ]
Заголовок сообщения:  HTTPS и сертификаты

Доброго времени суток,

Делаю все по документации (http://bgbilling.ru/v4.6/doc/ch01s14.html):
...
Работа сертификатов основывается на паре асинхронных ключей. Необходимо создать их:

keytool -keystore .keystore -alias bgbilling -genkey -keyalg RSA -dname "cn=bill.provider.ru, email=email@provider.ru,ou=Provider Billing, o=Provider, c=RU" -validity 1001
...

Пробую:
-8<---------------------------------------------------------
root@bgbilling:/usr/local/BGBillingServer# keytool -keystore .keystore -alias bgbilling -genkey -keyalg RSA -dname "cn=bill.provider.ru, email=email@provider.ru,ou=Provider Billing, o=Provider, c=RU" -validity 1001
Unrecognized command: -keystore
Usage: keytool [COMMAND] [-- COMMAND]...
Manage private keys and public certificates.

Available commands:
-genkey Generate a Key Entry, eventually creating a key store.
[-alias ALIAS] [-keyalg ALGORITHM] [-keysize KEY_SIZE]
[-sigalg ALGORITHM] [-dname NAME] [-keypass PASSWORD]
[-validity DAY_COUNT] [-storetype STORE_TYPE]
[-keystore URL] [-storepass PASSWORD]
[-provider PROVIDER_CLASS_NAME] [-v].
-import Add Key Entries and Trusted Certificates.
[-alias ALIAS] [-file FILE] [-keypass PASSWORD]
[-noprompt] [-trustcacerts] [-storetype STORE_TYPE]
[-keystore URL] [-storepass PASSWORD]
[-provider PROVIDER_CLASS_NAME] [-v].
-selfcert Generate a self-signed Trusted Certificate.
[-alias ALIAS] [-sigalg ALGORITHM] [-dname NAME]
[-validity DAY_COUNT] [-keypass PASSWORD]
[-storetype STORE_TYPE] [-keystore URL]
[-storepass PASSWORD] [-provider PROVIDER_CLASS_NAME] [-v].
-identitydb NOT IMPLEMENTED YET. Import JDK1.1 Identity Database.
[-file FILE] [-storetype STORE_TYPE] [-keystore URL]
[-storepass PASSWORD] [-provider PROVIDER_CLASS_NAME] [-v].
-certreq Issue a Certificate Signing Request (CSR).
[-alias ALIAS] [-sigalg ALGORITHM] [-file FILE]
[-keypass PASSWORD] [-storetype STORE_TYPE] [-keystore URL]
[-storepass PASSWORD] [-provider PROVIDER_CLASS_NAME] [-v]
[-attributes].
-export Export a Certificate from a key store.
[-alias ALIAS] [-file FILE] [-storetype STORE_TYPE]
[-keystore URL] [-storepass PASSWORD]
[-provider PROVIDER_CLASS_NAME] [-rfc] [-v].
-list Print one or all Certificates in a key store to STDOUT.
[-alias ALIAS] [-storetype STORE_TYPE] [-keystore URL]
[-storepass PASSWORD] [-provider PROVIDER_CLASS_NAME]
[-rfc] [-v].
-printcert Print a human-readable form of a Certificate in a FILE.
[-file FILE] [-v].
-keyclone Clone a Key Entry in a key store.
[-alias ALIAS] [-dest ALIAS] [-keypass PASSWORD]
[-new PASSWORD] [-storetype STORE_TYPE] [-keystore URL]
[-storepass PASSWORD] [-provider PROVIDER_CLASS_NAME] [-v].
-storepasswd Change the password protecting a key store.
[-new PASSWORD] [-storetype STORE_TYPE] [-keystore URL]
[-storepass PASSWORD] [-provider PROVIDER_CLASS_NAME] [-v].
-keypasswd Change the password protecting a Key Entry in a key store.
[-alias ALIAS] [-keypass PASSWORD] [-new PASSWORD]
[-storetype STORE_TYPE] [-keystore URL]
[-storepass PASSWORD] [-provider PROVIDER_CLASS_NAME] [-v].
-delete Delete a Key Entry or a Trusted Certificate from a key store.
[-alias ALIAS] [-storetype STORE_TYPE] [-keystore URL]
[-storepass PASSWORD] [-provider PROVIDER_CLASS_NAME] [-v].
-cacert Import a CA's Trusted Certificate.
[-file FILE] [-storetype STORE_TYPE] [-keystore URL]
[-storepass PASSWORD] [-provider PROVIDER_CLASS_NAME] [-v].

Standard options:
-help print this help, then exit
-version print version number, then exit
-JOPTION pass argument to the Java runtime

Please report bugs at http://www.gnu.org/software/classpath/bugs.html
-8<-----------------------------------------------------------

Похоже, что keytool ничего не знает про keystore. Как же так?

P.S.
У меня linux debian 2.6.29.1-1

Автор:  Amir [ 11 сен 2009, 13:17 ]
Заголовок сообщения:  Re: HTTPS и сертификаты

Используйте sun'овскую jre/jdk.

Автор:  survivor [ 11 сен 2009, 16:02 ]
Заголовок сообщения:  Re: HTTPS и сертификаты

У меня JRE: jre1.6.0_16 скачивал с сайта sun
Может нужно что-то еще установить?

Автор:  skn [ 11 сен 2009, 16:33 ]
Заголовок сообщения:  Re: HTTPS и сертификаты

Код:
java -version
что выдает?

Автор:  survivor [ 11 сен 2009, 18:52 ]
Заголовок сообщения:  Re: HTTPS и сертификаты

Хм...

java version "1.5.0"
gij (GNU libgcj) version 4.3.2

Copyright (C) 2007 Free Software Foundation, Inc.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

получается у меня два jre ? один который я поставил по инструкции в /opt/java и на котором работает биллинг и второй gnu....

Автор:  skn [ 11 сен 2009, 20:06 ]
Заголовок сообщения:  Re: HTTPS и сертификаты

правильно, вызывая keytool прописывайте полный путь

Автор:  survivor [ 11 сен 2009, 20:54 ]
Заголовок сообщения:  Re: HTTPS и сертификаты

сделал так:

apt-get update
apt-get install sun-java6-jdk
update-java-alternatives -s java-6-sun

теперь:

root@billing: java -version

java version "1.6.0_12"
Java(TM) SE Runtime Environment (build 1.6.0_12-b04)
Java HotSpot(TM) Server VM (build 11.2-b01, mixed mode)

Страница 1 из 1 Часовой пояс: UTC + 5 часов [ Летнее время ]
Powered by phpBB® Forum Software © phpBB Group
http://www.phpbb.com/