Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-6350732

keytool to suport CRL and remarks options

XMLWordPrintable

    • Icon: Enhancement Enhancement
    • Resolution: Duplicate
    • Icon: P4 P4
    • None
    • 5.0
    • security-libs

      A DESCRIPTION OF THE REQUEST :
      I would like keytool to have a couple of other options meant to work with -genkey

      -crl <url of certificate revocation list>
      -serial <user-defined serial number of this certificate>
      -remarks <remarks>




      JUSTIFICATION :
      -serial and -crl work together to enable one to revoke certificates. To revoke a certificate, one publishes the user-defined serial number at the specified crl.

      I'm pretty sure that you can attach arbitrary remarks to a certificate, a;lthough the tool does not do it. This would enable one, for instance, to attach something like:

      "To verify this self-signed certificate before you start the applet, ring customer support on ######## and quote the fingerprint"

      to a certificate generated with genkey.


      CUSTOMER SUBMITTED WORKAROUND :
      Use other tools to generate the certificate.

            Unassigned Unassigned
            gmanwanisunw Girish Manwani (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved:
              Imported:
              Indexed: