Bill East on 4 Dec 2010 04:56:33 -0800
[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]
[PLUG] OpenJDK and pkcs12 user certificate
- From: Bill East <email@example.com>
- To: "Philadelphia Linux User's Group Discussion List" <firstname.lastname@example.org>
- Subject: [PLUG] OpenJDK and pkcs12 user certificate
- Date: Sat, 4 Dec 2010 07:56:28 -0500
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:date:message-id :subject:from:to:content-type; bh=z4oXotlHvY1gS67W9KDg28YPkeoz/UDIvv1H1A+9/E4=; b=WuXMCkvyKFliZJlrf0sItAvgLewff8b0BYkYjOPXPvIoLB5NHVDpMqv/s/d93gRocR s43qf34s3+tWWKPKMh59o0oUECTRQ4pNqMfPWxetUhr52+mA7dIL9W5XfvPGhoaBNXko StvZ+e7kt/6OAD5UFN8kIFr805342kb4C1VeU=
- Reply-to: Philadelphia Linux User's Group Discussion List <email@example.com>
- Sender: firstname.lastname@example.org
So I have a VPN that uses client certificates to authenticate, it is supposed to support Linux. In addition to SSL, it uses a Java module to create a virtual interface on the box for networking. On my Slackware box with JRE I was able to use the Java Control Panel to import the certificate and got to a point where it was pretty clear that the problem was on the VPN side - at which point their tech support told me they don't support Slackware. So I haul out the boy scout camp Ubuntu box and bring that up, to discover it's using OpenJDK and the IcedTea pluging for Firefox. No Control Panel. It does have the CLI keytool, but if I try "keytool -importcert -file filename.p12" it complains that the file is not an X.509 certificate. The nerve. The OpenJDK GUI tool in Preferences doesn't seem to have a way to import the certificate.
So I guess the question is, is there a simple way to talk OpenJDK into using my p12 cert, or should I rip-and-replace it with JRE and try to go at it that way?
Philadelphia Linux Users Group -- http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug