Results 1 to 7 of 7
  1. #1
    Member
    Join Date
    Jun 2010
    Location
    Morrens
    Posts
    4

    SSL certificate compatibility list

    Hi,

    When deploying LightStreamer as an SSL service, are there any specific issues to take care of, and more precisely, are there any SSL certificate compatibility issues?

    E.g. our experience with GoDaddy certificates is that they are a bit tricky to install even on standard Apache web servers, hence we suspect that there might be some obstacles in conjunction with LightStreamer. What's your experience?

    Thanks!

  2. #2
    Administrator
    Join Date
    Jul 2006
    Location
    Milan, Italy
    Posts
    515
    Hi,

    No special issues exist in generating SSL certificates for Lightstreamer.

    Just use "keytool" (part of Java JDK) to generate your certificate and submit it to your favorite CA for certification.

    For more information, see "SSL Certificates.pdf" inside the Lightstreamer distribution.

  3. #3
    Member
    Join Date
    May 2010
    Location
    London
    Posts
    18
    What about where we don't have control over the issuing of reqs to CAs, as in a large company where cert reqs all go through a specific dept?

    I have had certs issued for me, so I have the .pfx and .cer files, but when I try to use them in a keystore (using keytool), I get an exception: javax.net.ssl.SSLHandshakeException: no cipher suites in common.

    Is it possible to convert a .cer file into a Java keystore or do I need to have generated the request using the same alias etc.?

  4. #4
    Administrator
    Join Date
    Jul 2006
    Location
    Milan, Italy
    Posts
    515
    The certificate should be in a format compatible with Java Secure Socket Extension (JSSE).

    The easiest way to create it is via the keytool application, as explained in the "SSL Certificates.pdf" document.

    The possibility to convert other certificate formats into a Java compatible one should be investigated on a case-by-case basis.

    Hope that helps

  5. #5
    Member
    Join Date
    May 2010
    Location
    London
    Posts
    18
    Thanks for the reply.

    I ended up using Keystore Explorer to import the Private Key and create a new keystore. Easy in the end!

    http://www.lazgosoftware.com/kse/index.html

  6. #6
    Administrator
    Join Date
    Jul 2006
    Location
    Milan, Italy
    Posts
    515
    That's a good tip!

    Thanks

  7. #7
    If you want to replace keytool with a GUI tool then you can also use CERTivity.
    http://www.edulib.com/products/keystores-manager/

    It can handle different types of keystores (JKS, JCEKS, PKCS12, BKS, UBER, Windows) and digital signatures.

 

 

Similar Threads

  1. BlackBerry OS compatibility
    By ulises.juarez in forum Client APIs
    Replies: 6
    Last Post: October 24th, 2011, 09:39 AM
  2. MOBILE DEVICES: add your compatibility test here
    By Alessandro in forum Client APIs
    Replies: 7
    Last Post: May 8th, 2011, 10:26 AM
  3. MOBILE DEVICES: add your compatibility test here
    By Alessandro in forum Client APIs
    Replies: 2
    Last Post: October 6th, 2009, 09:57 PM
  4. Keystore certificate alias
    By pwestlake in forum General
    Replies: 1
    Last Post: November 21st, 2008, 11:31 AM
  5. Stock List Adapter
    By minhphan200677 in forum Adapter APIs
    Replies: 1
    Last Post: April 14th, 2008, 09:26 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
All times are GMT +1. The time now is 09:52 PM.