How to create a Keystore file

[Tulsa]

Hi All,
I need help in creating a keystore file.

Application server used is Tomcat.

Here I am using database connection strings fopr connecting to a database.So i need to make that connection strings secure. For that i need a keystore file, and mention the databse connection strings in that keystore file. So that when i try to connect to a databse the code will access the keystore file and decrypt (bcoz conncetion strings will be encrypted) the connection strings and login to the database.

I finished my code how to read the keystore file from a specific location..But the thing is i need help in creating keystore file and how to mention the database connection strings in that keystore file.


Thanks in Advance.

[Petr]

Well Do you want decrypt key to help java app?
I think it don't good approach, you can setting permission access in self database and limit access from remote client.

[Tulsa]

Actually, the thing is I am creating a keystore through java code in a certain location(Say on Windows) and keystore file has three pecies of information DBUsername, Password and connection string.That will be encrypted through java code..Keystore filepath, keystore password and DBUsername, password and conn string will be mentioned as aliases in the keystore.property file as shown...

#************************************
# KEYSTORE INFO
#************************************
ODS_KEYSTORE_FILE_PATH=C:\\Documents and Settings\\User\\ods.keystore
# the following may contain any value for security purposes
# they just need to be unique
ODS_KEYSTORE_PASSWORD=ods-keystore-password
ODS_KEYSTORE_USER_ALIAS=ods-keystore-user-alias
ODS_KEYSTORE_PASS_ALIAS=ods-keystore-pass-alias
ODS_KEYSTORE_CONN_ALIAS=ods-keystore-conn-alias

===========================================
The DBUsername, Password and Conn String will be in encrypted mode in the keystore file.So when i try to login to the database it must access the keystore file using the keystore password and get the data required, dedcrypt that and login to the database using that information.

Here these 3 pecies must be secured DBUsername, Password and Conn String. So that's what my TeamLd wants to make it secure.He sent me code for creating keystore, retriving the keystore.But i need to include everything in my present DB conn code.

So the thing is it is a good approach or not..and also will it work if i include the code sent by my TL in my present code.

[ora.adf]

This way is not a common way for security . one approach is to use Application Server security settings to secure your App .