CAcert Code Development list.

[Bernhard Fröhlich <bernhard AT cacert.org>]

Hi Tim,

I downloaded the tool and managed to get it running. But then I'm quite lost.

I tried "File -> Set CA" and "KeyStore -> Get Or Create...", seemingly with success (no error messages or so). Then I tried "Generate Key Pair...", but if I make my selections and press "Generate" nothing happens. "Cancel" closes the dialog. "Generate CSR..." consequently shows an empty Key Alias list for my newly created keystore.

I did not test the rest of the menu items, since I doubt that they make any sense without being able to create a key pair.

What would be a "sample run" of the tool (that is: which menu items to select and which data to enter in the inputs) to satisfy the basic requirement: create a key pair and an ASCII coded CSR wich may be pasted in the CAcert page? Please note that a running signer is not needed for this!

    Kind regards
    Ted

On 15.07.2021 04:54, Tim de Vries wrote:

Hang, maybe I can copy paste...


Hello,

I hope this has reached the correct place.

I have released:

https://www.tecreations.ca/java/downloads/release/signed-cacert..jar
You may,

Windows: Double Click, runs the launcher, scroll down to org.cacert.SecurityToolApp and click "Launch"

Others, you'll have to figure it out.

It WILL NOT install ca root and intermediate certs unless run As Administrator.

Cmd /Y will not be sufficient (Win 7)

Please Try it out. You may verify the certs with:

jarsigner -verify -verbose -certs signed-cacert.jar
I'll try to post more often as things are determined to work. I still
haven't test key output for SSL Server Using Apache 2. But will, maybe
tonight.

Man it's hot...

You may build by installing Java Development Kit, using Launcher to
run Installer.

Install to C:\Users\YOURNAME\Documents\code

Then in the IDE, run org.cacert.BuildCacertPackage.
I think I got it right, but maybe not. Source is included so you
should be able to Class:XXX Line: XXX. Justification? Explanation?

Tim

Or, in the Default Package, run Build.

You may install into Java CACERTS file by using CMD /Y (Windows 7) and
then using the appropriate menu item to Install CA into the CACERTS
file. <JAVA.HOME>/lib/security/cacerts.

Closing should indicate that it was successful in saving. That confirms it was successful.

YMMV.

Tim.
Questions? Comments? Criticism (Hopefully Constructive)?
tim.devries AT yahoo.ca
tecreator AT gmail.com

PS. Yes, I would have tested create CSR and Save Certificate from the
Servers response, however, CACerts server is still not signing. I can
fake it, but then shouldn't I be considered a bona fide CA?
Please Advise.


Sent from my iPhone

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature