-
Enhancement
-
Resolution: Duplicate
-
P4
-
None
-
5.0
-
x86
-
windows_xp
A DESCRIPTION OF THE REQUEST :
I would like keytool to have a couple of other options meant to work with -genkey
-crl <url of certificate revocation list>
-serial <user-defined serial number of this certificate>
-remarks <remarks>
JUSTIFICATION :
-serial and -crl work together to enable one to revoke certificates. To revoke a certificate, one publishes the user-defined serial number at the specified crl.
I'm pretty sure that you can attach arbitrary remarks to a certificate, a;lthough the tool does not do it. This would enable one, for instance, to attach something like:
"To verify this self-signed certificate before you start the applet, ring customer support on ######## and quote the fingerprint"
to a certificate generated with genkey.
CUSTOMER SUBMITTED WORKAROUND :
Use other tools to generate the certificate.
I would like keytool to have a couple of other options meant to work with -genkey
-crl <url of certificate revocation list>
-serial <user-defined serial number of this certificate>
-remarks <remarks>
JUSTIFICATION :
-serial and -crl work together to enable one to revoke certificates. To revoke a certificate, one publishes the user-defined serial number at the specified crl.
I'm pretty sure that you can attach arbitrary remarks to a certificate, a;lthough the tool does not do it. This would enable one, for instance, to attach something like:
"To verify this self-signed certificate before you start the applet, ring customer support on ######## and quote the fingerprint"
to a certificate generated with genkey.
CUSTOMER SUBMITTED WORKAROUND :
Use other tools to generate the certificate.
- duplicates
-
JDK-6890876 jarsigner can add CRL info into signed jar
-
- Resolved
-