Automated Generation of Self-signed Certificates with LC Digital Signatures

[Carlos_Nascimbe]

Hi,

I would like to know if we can use LC Digital Signatures to generate a bunch of self-signed certificates using data from an Active Directory...

I never read about this possibility but...

Thanks for your answer,

Carlos

[John_C_Cummins]

Hi Carlos,

As far as I know there is no out of the box feature for this. I could envision you writing a java application that does the following:

1. Use LC User Management APIs to query LDAP for information like: name, organization, department, password (? - not sure you can do this with our LDAP APIs)
2. Call the Java utility mentioned in the JBoss installation docs (not sure it's part of the installers for other app servers) for creating self-signed certificates, using the information queried in step 1

If you wanted to use these certificates for server-side signing then you would need to import them into LC using the LC java APIs. I've never tried it but I think that should work.

Hope this helps.

[Carlos_Nascimbe]

Hi John,

Thank you very much for your answer.

What you mention seems possible using keytool (i've already used keytool to generate SSL self-signed certificates).

http://community.jboss.org/wiki/GeneratingSelfSignedCertificatewithKeytool

My only concern is if keytool can also create self-signed certificate for persons...

I'll do a little research and post the answer here...

Regards,

Carlos

[Carlos_Nascimbe]

The answer is YES: http://download-llnw.oracle.com/javase/1.4.2/docs/tooldocs/windows/keytool.html

We can create self-signed certificates using KeyTool for personal certificates..

Carlos