-1

I am trying to understand how keytool work.

I have few questions:

  • Question about Keytool: If we use keytool (keygen) using exact same details (DN/password .. etc) on two different machines, will we end up with identical keys?

  • Question about ruleset.xml and DeploymentRuleSet.jar (Java 1.7 security): If we use self signed certificates, and import those certificates on client machines, will that resolve the issues of pop up warning that are getting nastier and nastier with each Java upgrade (now 1.7.0_45 is giving even worse warnings)

Frank van Puffelen
  • 565,676
  • 79
  • 828
  • 807
Samir
  • 31
  • 2

1 Answers1

0

  1. Public/private key pairs are randomly seeded. You will not get the same keys on two machines using the same input.

  2. Java has its own certificate store. Yes, if you import your self-signed certificate into client's key store, and app is signed properly, you should not get too nasty warnings.

Marcus Adams
  • 53,009
  • 9
  • 91
  • 143