Skip to main content

How (which tool to use) to generate public key

6 replies [Last post]
vinaykagarwal
Offline
Joined: 2006-01-14
Points: 0

Hello,
I am at the stage where I need to generate a public key for online cert. Does anyone have the exact command for that? Thanks in advance.
Regards,
Vinay Agarwal

Reply viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.
jaya_h
Offline
Joined: 2005-07-11
Points: 0

Hi Vinay,

Are you trying to extract the public key from online.crt file?
If that's the case, you could use OnlineKeytool in hdcookbook as below:

java net.java.bd.tools.security.OnlineKeytool -debug bda/keyfile.bin bda/online.crt

The above cmd imports both private and public keys from the BDA files into
a Java Keystore, which then can be used for generating online.sig file.

Please refer to the documentation at:

/DiscCreationTools/security/README.html#ONLINE

Thanks,
Jaya

vinaykagarwal
Offline
Joined: 2006-01-14
Points: 0

I am actually trying to order online cert from BDA. They obviously want a public key but they only specified the following:

Also, in order for us to process the order, we will need the public key to be an electronic file. Typically it is 2KB in size, and ends with “.asc”.

Joe Rice

They're looking for a PGP public key. It'll be used to encrypt the certificate files. GnuPG would work for this. http://www.gnupg.org/

Cheers,
Joe

On Nov 30, 2009, at 3:29 PM, bd-j-dev@mobileandembedded.org wrote:

> I am actually trying to order online cert from BDA. They obviously want a public key but they only specified the following:
>
> Also, in order for us to process the order, we will need the public key to be an electronic file. Typically it is 2KB in size, and ends with “.asc”.
> [Message sent by forum member 'vinaykagarwal' ]
>
> http://forums.java.net/jive/thread.jspa?messageID=373956
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: bd-j-dev-unsubscribe@hdcookbook.dev.java.net
> For additional commands, e-mail: bd-j-dev-help@hdcookbook.dev.java.net
>

---------------------------------------------------------------------
To unsubscribe, e-mail: bd-j-dev-unsubscribe@hdcookbook.dev.java.net
For additional commands, e-mail: bd-j-dev-help@hdcookbook.dev.java.net

vinaykagarwal
Offline
Joined: 2006-01-14
Points: 0

Thanks Joe. I had asked for technical details from BDA but they didn't have any.

I generated a key and then exported to ASCII which I then sent to BDA. Hopefully it the right format.

colombus
Offline
Joined: 2010-08-08
Points: 0

Hi Vinay

This generation of pulic key is for online.sig verification ??

Joe Rice

The key sent to the BDA is your PGP public key - they use that to encrypt the set of online certificate files that they create for you. (the certificate/public-key, the private key, and the the certificate revocation list). Then you use a signing tool (eg the one in HDCookbook) to create online.sig from your online private key and your app.discroot.crt.

IIRC the BDA charges $1k for issuing an online certificate.

Cheers,
Joe

On Oct 6, 2010, at 11:43 PM, bd-j-dev@mobileandembedded.org wrote:

> Hi Vinay
>
> This generation of pulic key is for online.sig verification ??
> [Message sent by forum member 'colombus']
>
> http://forums.java.net/jive/thread.jspa?messageID=484482
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: bd-j-dev-unsubscribe@hdcookbook.dev.java.net
> For additional commands, e-mail: bd-j-dev-help@hdcookbook.dev.java.net
>

---------------------------------------------------------------------
To unsubscribe, e-mail: bd-j-dev-unsubscribe@hdcookbook.dev.java.net
For additional commands, e-mail: bd-j-dev-help@hdcookbook.dev.java.net