Skip to Content
Java Cryptography
book

Java Cryptography

by Jonathan Knudsen
May 1998
Intermediate to advanced
362 pages
10h 8m
English
O'Reilly Media, Inc.
Content preview from Java Cryptography

Internet Explorer

Microsoft, as usual, has come up with entirely new solutions to the problem of code signing. It uses its own archive format and a set of code-signing tools based around the Microsoft CryptoAPI.

Recipe

You’ll have to install two pieces of software to sign code for Internet Explorer. First, you’ll need the browser, Internet Explorer 4.0, available from http://www.microsoft.com/ie/ie40/. For the archive and code-signing tools, you’ll need the SDK for Java 2.0, available from http://www.microsoft.com/java/.

Prepare a Signer

Microsoft’s tools allow you to create a test certificate that you can use for signing. This means you can experiment with signed applets without shelling out $20 for a real certificate. If you want to sign code with a real certificate, you can buy one from VeriSign (http://www.verisign.com/).

To create a test certificate, you can use tools that are installed as part of the SDK for Java, in the SDK-Java.20\Bin\PackSign directory:

MakeCert -sk JonathanKey -n CN=JonathanCompany Jonathan.cert

This creates a certificate file called Jonathan.cert. It uses the secret key called JonathanKey. If there is no such key, MakeCert creates one. This key is stored in a private key management database and can be accessed later. The -n option is used to specify what name is placed on the newly created certificate. You need a Software Publisher Certificate (SPC) to sign code. The SDK for Java has a handy utility that converts a certificate into an SPC:

Cert2SPC Jonathan.cert ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

AirBnbBlueOriginElectronic ArtsHomeDepotNasdaqRakutenTata Consultancy Services

QuotationMarkO’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
Julian F.
Head of Cybersecurity
QuotationMarkI wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.
Addison B.
Field Engineer
QuotationMarkI’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.
Amir M.
Data Platform Tech Lead
QuotationMarkI'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Mark W.
Embedded Software Engineer

You might also like

Hands-On Cryptography with Java

Hands-On Cryptography with Java

Erik Costlow
Java Security Handbook

Java Security Handbook

Jamie Jaworski, Paul J. Perrone, Venkata S.R. Krishna Chaganti

Publisher Resources

ISBN: 1565924029Errata Page