Get certificate from keystore not based on alias name in java

Question

I am getting certificates from the keystore based on alias name using the below code,

    KeyStore keyStore = KeyStore.getInstance("Windows-MY");

    Enumeration aliasesEnum = keyStore.aliases();

    while(aliasesEnum.hasMoreElements())
    {
       aAliasName = (String)aliasesEnum.nextElement();  
       X509Certificate certificate = (X509Certificate)keyStore.getCertificate(aAliasName);
    }

Is there any way to get aliases from the current token instead of getting from keystore?.

Thanks in advance.

If you have another problem now, then create a new question. It is bad practice to change your question after it has been answered, because then the answers don't match the question anymore. — Omikron
– Omikron, Commented Mar 29, 2016 at 12:57
@Vijaya, as Omikron pointed out, please revert your question and open a new question for your new issue. So the answer(s) below would match the question, and people visiting this question in the future know what would solve their problem. You can accept the answer which solved your issue, thus closing this question. — always_a_rookie
– always_a_rookie, Commented Mar 29, 2016 at 14:27

always_a_rookie · Accepted Answer · 2016-03-28 16:26:14Z

1

It is not possible to get a particular certificate other than knowing the alias.

The best practice would be to have unique alias in your use case, so you will know which certificate you are getting.

If you are storing the Certificate through the KeyStore api, you can do a containsAlias(alias) to see if the alias already exists before you save.

answered Mar 28, 2016 at 16:26

always_a_rookie

4,8801 gold badge30 silver badges51 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Vijaya Over a year ago

Thanks you for your reply. i fixed the issue by following this link joinup.ec.europa.eu/software/sd-dss/issue/….

Vijaya Over a year ago

Now i am having another problem can you please check updated question.

Omikron · Accepted Answer · 2016-03-28 21:17:42Z

0

Normally alias names are unique. This is a problem specific to MSCAPI keystore. There are several bug reports (some of them very old) regarding this issue:

http://bugs.java.com/bugdatabase/view_bug.do?bug_id=2162058

http://bugs.java.com/bugdatabase/view_bug.do?bug_id=6483657

http://bugs.java.com/bugdatabase/view_bug.do?bug_id=8058544

http://bugs.java.com/bugdatabase/view_bug.do?bug_id=6672015

Follow the last link, it contains a workaround. You basically have to modify the alias names via reflection API into something unique (see code in link). Not exactly a clean solution, but unfortunately the only way.

answered Mar 28, 2016 at 21:17

Omikron

4,1641 gold badge29 silver badges34 bronze badges

3 Comments

Vijaya Over a year ago

Thanks you for your reply. i fixed the issue by following this link joinup.ec.europa.eu/software/sd-dss/issue/….

Vijaya Over a year ago

I think this is same as last link you have provided.

Vijaya Over a year ago

Now i am having another problem can you please check updated question.

Collectives™ on Stack Overflow

Get certificate from keystore not based on alias name in java

2 Answers 2

2 Comments

3 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

2 Comments

3 Comments

Your Answer

Sign up or log in

Post as a guest

Related