javakey

/usr/java/bin/javakey [options]

Solaris only. Java security tool. Use javakey to generate digital signatures for archive files, and to build and manage a database of entities, their keys and certificates, and indications of their "trusted" (or nontrusted) status.

The leading - on options may be omitted. Only one option may be specified per javakey invocation.

Options

In the option arguments below, an id_or_signer is either a secure ID or a secure signer already in the database.

-c identity [true | false]

Create a new database identity named identity. The optional true or false is an indication as to whether the identity can be trusted. The default is false.

-cs signer [true | false]

Create a new signer in the database named signer. The optional true or false is an indication of whether the signer can be trusted. The default is false.

-dc file

Display the certificate in file.

-ec id_or_signer cnum cfile

Export certificate cnum from id or signer to cfile. The number must be one previously created by javakey.

-ek id_or_signer public [private]

Export the public key for id or signer to file public. Optionally, export the private key to file private. The keys must be in X.509 format.

-g signer algorithm ksize [public] [private]

Shortcut for -gk to generate a key pair for signer.

-gc file

Generate a certificate according to the directives in file.

-gk signer algorithm ksize [public] [private]

Generate a key pair for signer using standard algorithm algorithm, with a key-size of ksize bits. The public key is placed in the file public, and the private key in file private. Exporting private keys should be done with caution.

-gs dfile jarfile

Sign the Java Archive file jarfile according to directives in dfile.

-ic id_or_signer csrcfile

Associate the public key certificate in csrcfile with the named id or signer. This certificate must match a preexisting one, if there is one. Otherwise, this certificate is assigned to the id or signer.

-ii id_or_signer

Supply information about the id or signer. javakey reads information typed interactively. End the information with a line containing a single dot.

-ik identity ksrcfile

Associate the public key in ksrcfile with identity. The key must be in X.509 format.

-ikp signer public private

Import the key pair from files public and private and associate them with signer. The keys must be in X.509 format.

-l

List the usernames of all identities and signers in the database.

-ld

Like -l, but provide detailed information.

-li id_or_signer

Provide detailed information just about the named id or signer.

-r id_or_signer

Remove the id or signer from the database.

-t id_or_signer [true | false]

Set or reset the trust level for id or signer.

Examples

Create a new identity, arnold, who is to be trusted:

javakey -c arnold true

List detailed information about arnold:

javakey -li arnold