在Java钥匙店持有CA证书时，我如何验证证书链
有人可以帮助我以下情况，我事先搜索了谷歌搜索，但没有找到一个博客来概述我想做什么，谢谢。
我有和内部测试PKI（基于AD CS）。我已经将Root CA证书和发行CA证书（将其私钥）（除去其私钥）导入到Cacerts Java密钥商店（键入GUI工具“ Keystore Explorer 5.5.5.1”
我有一个叶子（终端证书）' Java Keystore'当我想模拟通过Web浏览器获得（给出）LEAF证书的情况（例如，在打开TLS连接到Web服务器时）
。在同一计算机上创建的文件（使用Windows默认方法，因此在Windows密钥库中使用的私有密钥）也包含Java密钥库CACERTS（我在其中导入上述CA CERTS）和JAVA JDK（例如，keytool.exe）
因此，我需要做的事情（理想情况下使用Keytool或适合Windows的预制脚本）指向Leaf .PEM证书，并说GO检查该叶子证书的证书链，但使用CA在CACERTS KEYSTORE中举行的证书
可以告诉我如何做这件事，因为我看到的唯一示例是关于检查Cacerts Keystore中已经在CERT的链条的链条。而我想检查一个.pem平面文件的链
Can someone please help me with the following, I googled before hand but did not find a blog outlining what I wanted to do, thanks in advance.
I have and internal test PKI (based on AD CS). I have imported the Root CA certificate and the Issuing CA Certificate (minus their private keys) into the CACerts java key store (keying the GUI tool "KeyStore Explorer 5.5.1"
I have a leaf (end-entity certificate) 'outside of the Java keystore' as I want to simulate a situation where the client would obtain (be given) the leaf certificate via a WEB browser (for example when opening a TLS connection to a WEB server).
The leaf certificate is stored in a .pem flat file on the same computer where it was create (using Windows default method so private key for the cert is in the Windows keyStore). The computer also contains the Java KeyStore CACerts (where I imported the CA certs as above) and the Java JDK (so Keytool.exe for example)
So what I need to do (ideally using Keytool or a pre-made script suitable for Windows) is point to the leaf .pem certificate and say go check the certificate chain of this leaf certificate but using the CA certs held in CACerts keystore
Can someone kindly tell me how to do this as the only examples I have seen this far are about checking the chain for certs already in the CACerts keystore. Whereas I want to check the chain of a .pem flat file against the CA certs held in the CACerts java keystore
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论