Ok great. Thanks!!
Main Topics
Browse All TopicsGreetings,
I'm trying to understand the fundamental difference between the Java keytool and the SelfSSL tool for the sake of generating a Certificate Signing Request. In this context, we will obtained a signed certificate from Intuit for the sake of credit card transactions.
I know/realize the Java keytool resides on the Windows platform if Java is installed. What I need to know is --> can I use the Java keytool on the Windows platform when the code solution will be in ASP .Net (NOT Java). I really don't see how it would make a difference what tool was used to create the signed request and import the signed certificate... just as long as it gets done, I would imagine any application could use the end result?
yes/no?
Thanks!
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Business Accounts
Answer for Membership
by: ParanormasticPosted on 2009-10-20 at 09:49:53ID: 25616016
You can use any program that is capable of generating a certificate or a certificate signing request (CSR) file to get your cert. If you need to use it in different programs / different servers, then make sure that the private key is allowed to be exportable during key generation - the defaults on this will vary per application. If you are concerned about security, you can then remove the orignal private key and import the cert/key from the exported files and declare them non-exportable upon import, copy the exported backup to archive media (usb flash drive, cd, etc.) and secure that (lock it up).
r-creation -java.htm
Sometimes you may need to use openssl to convert the file format from one type to another (DER to PEM) or do special functions (create or split a pkcs #12/.pfx file from/into separate key and cert files), etc. but many applications allow options to avoid this - but it is a handy tool to be familiar with for those that don't as there are still plenty. Heck, you could use openssl to create the keyset and the certificate or CSR file too.
Generically speaking, the only difference that will affect most people will be the command syntax... they both support a wide range of options and create standard certificate formats that are interchangable. It usually just comes down to what you already have installed to avoid rolling out yet another program.
They can both be used for making a self-signed certificate (for testing - not proper for production), or requesting a cert from your own CA or a commercial CA. Both are fairly popular and properly documented well enough.
Handy keytool command generator:
http://www.digicert.com/cs