• Post Reply Bookmark Topic Watch Topic
  • New Topic
programming forums Java Mobile Certification Databases Caching Books Engineering Micro Controllers OS Languages Paradigms IDEs Build Tools Frameworks Application Servers Open Source This Site Careers Other all forums
this forum made possible by our volunteer staff, including ...
Marshals:
  • Campbell Ritchie
  • Bear Bibeault
  • Paul Clapham
  • Jeanne Boyarsky
  • Knute Snortum
Sheriffs:
  • Liutauras Vilda
  • Tim Cooke
  • Junilu Lacar
Saloon Keepers:
  • Ron McLeod
  • Stephan van Hulst
  • Tim Moores
  • Tim Holloway
  • Carey Brown
Bartenders:
  • Joe Ess
  • salvin francis
  • fred rosenberger

OpenSSL | 256 bit encryption

 
Greenhorn
Posts: 9
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hi Friends,

I am bit confused around generating self signed 256 bit encryption certificate. Kindly help. This is what I did

1) Created the private key with 256 bit AES encryption by using this command on openSSL
genrsa -aes256 -out C:\ssl\certificate\privkey.key 4096

2) Create the certificate using the key generated
req -new -x509 -config C:\ssl\openssl.cnf -key C:\ssl\certificate\privkey.key -out C:\ssl\certificate\newcert.pem -days 365

3) Exported certificate and key to P12 format
pkcs12 -config C:\ssl\openssl.cnf -export -in C:\ssl\certificate\newcert.pem -inkey C:\ssl\certificate\privkey.key -out C:\ssl\certificate\newcert.p12

4) Using java keytool, imported this P12 file to keystore
keytool -v -importkeystore -srckeystore C:\ssl\certificate\newcert.p12 -srcstoretype PKCS12 -destkeystore C:\ssl\moretry\sands.jks -deststoretype JKS

5) Configured JBoss server.xml to pick this keystore with correct keystorePass


Now when I try to access the localhost, I am able to see the screen with certificate but the encryption still show 128 bit encryption (attached). Kindly let me know if I am missing anything.

regards,
Sandy
screenshot.PNG
[Thumbnail for screenshot.PNG]
Shows certificate
 
Greenhorn
Posts: 23
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
 
Any sufficiently advanced technology will be used as a cat toy. And this tiny ad contains a very small cat:
Java file APIs (DOC, XLS, PDF, and many more)
https://products.aspose.com/total/java
  • Post Reply Bookmark Topic Watch Topic
  • New Topic
Boost this thread!