What is SunX509 used for and can it work with parties using IbmX509?

java ssl-certificate jsse
daramasala picture daramasala · Apr 9, 2012 · Viewed 13.2k times · Source

When I manually create a KeyManager, one of the steps is this: 

KeyManagerFactory.getInstance("SunX509")

This does not work on IBM jre where I need to specify "IbmX509".
My questions:

  1. I read that this is called the "certificate encoding algorithm". What does that mean? When is it used?
  2. What happens when the client is using the IBM algorithm and the server is using the Sun algorithm?

Thanks,
Doron

Answer

user207421 picture user207421 · Apr 10, 2012

I read that this is called the "certificate encoding algorithm".

No it isn't. It is a key manager algorithm that defines both a provider and a content type, in this case "Sun" or "IBM" and X.509. Basically it is a keystore type.

Anyway the best solution is not to use either. Just use

KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm());

The KeyManager and KeyManagerFactory just deal with the local keystore/truststore. The peer doesn't care about that, only about the certificates that are in them, and that only indirectly.

Related questions

How to add server certificate into java application in eclipse

I've got a server application which uses: import javax.net.ssl.SSLServerSocket; import javax.net.ssl.SSLServerSocketFactory; import javax.net.ssl.SSLSocket; This is a java application, which is a server itself - I'm not using any virtual servers and …

Read More
Programmatically Obtain KeyStore from PEM

How can one programmatically obtain a KeyStore from a PEM file containing both a certificate and a private key? I am attempting to provide a client certificate to a server in an HTTPS connection. I have confirmed that the client …

Read More
SSL_NULL_WITH_NULL_NULL cipher suite in in Jetty logs

I'm using Jetty with HTTPS and a valid certificate, and I'm not sure to get it right because cipher suite appears to be SSL_NULL_WITH_NULL_NULL in server logs. Client logs look good, however. The long story: I'm …

Read More