Example of how to set up a certificiate chain and a PKCS 12 store for
a private individual - obviously you'll need to generate your own keys,
and you may need to modify the NetscapeCertType extension or add a key
usage extension depending on your application, but you should get the
idea! As always this is just an example...
createCert(java.security.PublicKey pubKey,
java.security.PrivateKey caPrivKey,
java.security.PublicKey caPubKey)
we generate a certificate signed by our CA's intermediate certficate
static java.security.cert.Certificate
createIntermediateCert(java.security.PublicKey pubKey,
java.security.PrivateKey caPrivKey,
java.security.PublicKey caPubKey)
we generate an intermediate certificate signed by our CA
static java.security.cert.Certificate
createMasterCert(java.security.PublicKey pubKey,
java.security.PrivateKey privKey)
we generate the CA's certificate