Results 1 to 4 of 4
  1. #1
    Tulsa is offline Member
    Join Date
    Feb 2011
    Posts
    8
    Rep Power
    0

    Default How to create a Keystore file

    Hi All,
    I need help in creating a keystore file.

    Application server used is Tomcat.

    Here I am using database connection strings fopr connecting to a database.So i need to make that connection strings secure. For that i need a keystore file, and mention the databse connection strings in that keystore file. So that when i try to connect to a databse the code will access the keystore file and decrypt (bcoz conncetion strings will be encrypted) the connection strings and login to the database.

    I finished my code how to read the keystore file from a specific location..But the thing is i need help in creating keystore file and how to mention the database connection strings in that keystore file.


    Thanks in Advance.

  2. #2
    Petr's Avatar
    Petr is offline Senior Member
    Join Date
    Jan 2011
    Location
    Russia
    Posts
    620
    Rep Power
    4

    Default

    Well Do you want decrypt key to help java app?
    I think it don't good approach, you can setting permission access in self database and limit access from remote client.
    Skype: petrarsentev
    http://TrackStudio.com

  3. #3
    Tulsa is offline Member
    Join Date
    Feb 2011
    Posts
    8
    Rep Power
    0

    Default

    Actually, the thing is I am creating a keystore through java code in a certain location(Say on Windows) and keystore file has three pecies of information DBUsername, Password and connection string.That will be encrypted through java code..Keystore filepath, keystore password and DBUsername, password and conn string will be mentioned as aliases in the keystore.property file as shown...

    #************************************
    # KEYSTORE INFO
    #************************************
    ODS_KEYSTORE_FILE_PATH=C:\\Documents and Settings\\User\\ods.keystore
    # the following may contain any value for security purposes
    # they just need to be unique
    ODS_KEYSTORE_PASSWORD=ods-keystore-password
    ODS_KEYSTORE_USER_ALIAS=ods-keystore-user-alias
    ODS_KEYSTORE_PASS_ALIAS=ods-keystore-pass-alias
    ODS_KEYSTORE_CONN_ALIAS=ods-keystore-conn-alias

    ===========================================
    The DBUsername, Password and Conn String will be in encrypted mode in the keystore file.So when i try to login to the database it must access the keystore file using the keystore password and get the data required, dedcrypt that and login to the database using that information.

    Here these 3 pecies must be secured DBUsername, Password and Conn String. So that's what my TeamLd wants to make it secure.He sent me code for creating keystore, retriving the keystore.But i need to include everything in my present DB conn code.

    So the thing is it is a good approach or not..and also will it work if i include the code sent by my TL in my present code.

  4. #4
    ora.adf is offline Member
    Join Date
    Feb 2011
    Posts
    5
    Rep Power
    0

    Default

    This way is not a common way for security . one approach is to use Application Server security settings to secure your App .
    Last edited by ora.adf; 02-16-2011 at 04:12 PM.

Similar Threads

  1. convert keystore.ks into pem
    By mauro in forum Advanced Java
    Replies: 1
    Last Post: 12-09-2011, 02:02 PM
  2. How to create a Keystore File
    By Tulsa in forum New To Java
    Replies: 0
    Last Post: 02-14-2011, 12:04 AM
  3. get web browser Certs : keystore & linux
    By Nicolas741000 in forum Advanced Java
    Replies: 1
    Last Post: 11-14-2010, 09:39 PM
  4. Generating a Keystore
    By techbossmb in forum Java Applets
    Replies: 2
    Last Post: 09-30-2009, 08:31 PM
  5. GNU-compatible keystore
    By OrangeDog in forum Advanced Java
    Replies: 0
    Last Post: 04-30-2009, 03:50 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •