X.509 Certificate validation with Java and Bouncycastle

Posted by Rob on Stack Overflow See other posts from Stack Overflow or by Rob
Published on 2010-03-16T20:18:44Z Indexed on 2010/03/16 20:21 UTC
Read the original article Hit count: 712

Filed under:

bouncycastle

|

x.509

|

certificate

|

validation

|

java

Hi,

through the bouncycastle wiki page I was able to understand how to create a X.509 root certificate and a certification request, but I do not quite understand how to proceed concept- and programming wise after that.

Lets assume party A does a cert request and gets his client certificate from the CA. How can some party B validate A's certificate? What kind of certificate does A need? A root certificate? A 'normal' client certificate?

And how does the validation work on programming level, if we assume that A has successfully send his certificate in DER or PEM format to B?

Any help is much appreciated.

Best Regards, Rob

© Stack Overflow or respective owner

Related posts about bouncycastle

Bouncycastle encryption algorithms not provided

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm trying to use BouncyCastle with android to implement ECDH and EL Gamal. I've added the bouncycastle jar file (bcprov-jdk16-144.jar) and written some code that works with my computers jvm however when I try and port it to my android application it throws: java.security.NoSuchAlgorithmException:… >>> More
how to add bouncycastle algorithm to android

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi friends, I am trying to write a small application using bouncycastle algorithm, from the http://tinyurl.com/ylclavn (BouncyCastleProvider.java) it says we have to import and add the provider during runtime by the following code import org.bouncycastle.jce.provider.BouncyCastleProvider; Security… >>> More
Need example for BouncyCastle PGP File encryption in C#

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi, I'm trying to write an c#.net app to encrypt files using my private key (in ascii format) and any other public key (also in ascii format). The BouncyCastle library looks like the correct thing to use, but I cannot find documentation for C#. Could anyone please give me an example of how to use… >>> More
X.509 Certificate validation with Java and Bouncycastle

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi, through the bouncycastle wiki page I was able to understand how to create a X.509 root certificate and a certification request, but I do not quite understand how to proceed concept- and programming wise after that. Lets assume party A does a cert request and gets his client certificate from… >>> More
BouncyCastle GCM/CCM Exceprion in JAVA

as seen on Stack Overflow - Search for 'Stack Overflow'
can anyone give me an example for using GCM and/or CCM modes with AES in BouncyCastle? My code is this: SecretKeySpec key = new SecretKeySpec(keyBytes, "AES"); IvParameterSpec ivSpec = new IvParameterSpec(ivBytes); Cipher cipher = Cipher.getInstance("AES/AEAD/PKCS5Padding"… >>> More

Related posts about x.509

How to use Amazons' X.509 key and X.509 cert

as seen on Server Fault - Search for 'Server Fault'
How do I use Amazons' X.509 key and X.509 cert? I have downloaded these two files but don't know how to use them. Using rightscale (https://my.rightscale.com/aws_credentials/), do I copy and paste the content of these two files? When I do, the rightscale app says not valid. What am I doing wrong… >>> More
X.509 Certificate validation with Java and Bouncycastle

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi, through the bouncycastle wiki page I was able to understand how to create a X.509 root certificate and a certification request, but I do not quite understand how to proceed concept- and programming wise after that. Lets assume party A does a cert request and gets his client certificate from… >>> More
X.509 certificate based authentication with OpenSSL (without using sockets)

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi, Is there an alternative in OpenSSL to SSL_set_connect_state()/SSL_set_accept_state() for X.509 certificate based authentication? The problem is that in my application the client and server do not communicate using sockets, and the establishment of direct connection between them is not possible… >>> More
Converting a byte array to a X.509 certificate

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm trying to port a piece of Java code into .NET that takes a Base64 encoded string, converts it to a byte array, and then uses it to make a X.509 certificate to get the modulus & exponent for RSA encryption. This is the Java code I'm trying to convert: byte[] externalPublicKey = Base64.decode("base… >>> More
Verify a X.509 certificate with Java ME and Bouncy Castle

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi, Can anybody point me to an example of verifying a X.509 certificate with Bouncy Castle under Java ME? I can see how to easily do this in Java SE code with java.security.cert.Certificate.verify(), but I could not find an equivalent method in the lightweight BC API. Thanks in advance! Cheers Dino >>> More