Siemens XT65 User Manual page 101

Java User's Guide
12.1 Secure Data Transfer
112
1. Create CA and generate CA Root Certificate
- We need certificates with sha1 signature. Java Security supports a sha1 signature of the
certificate only.
Add the parameter "-sha1" to the command "Making CA certificate ..." in the section of
file CA.pl (cygwin location \cygwin\usr\ssl\misc")
- Create a shell (use location \cygwin\usr\ssl\misc)
- Execute commands
>perl CA.pl –newca
- Convert file format from PEM to DER
CA certificate cacert.pem
>openssl x509 -in ./demoCA/cacert.pem -inform PEM
-out ./demoCA/cacert.der -outform DER
CA private key file cakey.pem
>openssl pkcs8 -in ./demoCA/private/cakey.pem
-inform PEM -out ./demoCA/private/cakey.der
-outform DER -nocrypt -topk8
2. Create server certificate and java keystore
- Execute command
>keytool -genkey -alias server
-keypass keypass -keystore customer.ks -storepass keystorepass
-sigalg SHA1withRSA -keyalg RSA
The field "name" of the certificate is the domain name or the IP address of the server.
3. Create certificate request for server certificate
- Execute command
>keytool -certreq -alias server -file server.csr
-keypass keypass -keystore customer.ks
-storepass keystorepass
4. Sign certificate request by CA
- Execute command
>openssl ca -in server.csr -out server.pem
- Convert file format from PEM to DER
>openssl x509 -in server.pem -inform PEM
-out server.der -outform DER
wm_java_usersguide_v12
Confidential / Released
Page 101 of 123
s
2008-02-25