summaryrefslogtreecommitdiffstats
path: root/base/java-tools/src/com/netscape/cmstools/PKCS12Export.java
diff options
context:
space:
mode:
authorEndi S. Dewata <edewata@redhat.com>2016-02-15 05:27:19 +0100
committerEndi S. Dewata <edewata@redhat.com>2016-02-19 15:17:53 +0100
commita96ecbae1bfa27223bbebc7a67f695b643c4aebe (patch)
treef73e4a49d678d6eeec263c48bf383459485ba62c /base/java-tools/src/com/netscape/cmstools/PKCS12Export.java
parent0d44556fa78203121a24224d4733b89c36ef9cc9 (diff)
downloadpki-a96ecbae1bfa27223bbebc7a67f695b643c4aebe.tar.gz
pki-a96ecbae1bfa27223bbebc7a67f695b643c4aebe.tar.xz
pki-a96ecbae1bfa27223bbebc7a67f695b643c4aebe.zip
Refactored PKCS12Util to use PKCS12 object.
The PKCS12Util has been modified such that it stores the certs and keys in PKCS12 object instead of PFX object. The PKCS12 object can be loaded either from NSS database or PKCS #12 file. The PKCS12 object can later be stored into NSS database or PKCS #12 file. The pki pkcs12-cert-find and pkcs12-key-find commands were modified to require PKCS #12 password. https://fedorahosted.org/pki/ticket/1742
Diffstat (limited to 'base/java-tools/src/com/netscape/cmstools/PKCS12Export.java')
-rw-r--r--base/java-tools/src/com/netscape/cmstools/PKCS12Export.java5
1 files changed, 4 insertions, 1 deletions
diff --git a/base/java-tools/src/com/netscape/cmstools/PKCS12Export.java b/base/java-tools/src/com/netscape/cmstools/PKCS12Export.java
index 5d698bea3..bcc4252ba 100644
--- a/base/java-tools/src/com/netscape/cmstools/PKCS12Export.java
+++ b/base/java-tools/src/com/netscape/cmstools/PKCS12Export.java
@@ -26,6 +26,7 @@ import org.mozilla.jss.CryptoManager;
import org.mozilla.jss.crypto.CryptoToken;
import org.mozilla.jss.util.Password;
+import netscape.security.pkcs.PKCS12;
import netscape.security.pkcs.PKCS12Util;
/**
@@ -126,7 +127,9 @@ public class PKCS12Export {
try {
PKCS12Util util = new PKCS12Util();
- util.exportData(pkcs12OutputFilename, password);
+ PKCS12 pkcs12 = util.loadFromNSS();
+ util.storeIntoFile(pkcs12, pkcs12OutputFilename, password);
+
} finally {
password.clear();
}