-----Original Message-----
From: Vern Hamberg
Sent: Thursday, December 08, 2011 9:48 AM
To: Dan Kimmel
Subject: RE: Is there an key store that is similar to "Windows-MY" in java on the i?
You might be thinking about validation lists. They're an object type *VLDL. They have a set of APIs for populating them. They use a "label" or key - could be a user name - and then they take a value that gets encrypted by the system automatically. That value can either be one-way or retrievable. The one-way setting is for passwords where you want only to verify them - like the one-way methodology used on the i. But you can also get a password back from the validation list.
David, give me a shout if you want more info. Carsten Flensburg also has some APIs by Example stuff at his usual haunt.
I'd think that these objects are usable from Java via some jt400 calls - or just build a program around them, eh?
HTH
Vern
______________________________________________________________________________________________________________
Vernon M. Hamberg | Software Architect | RJS Software Systems 2970 Judicial Road, Suite 100 | Burnsville, MN 55337 | : 952-736-5800 | : Vern's email
Where information meets innovation
-----Original Message-----
From: Dan Kimmel
Sent: Wednesday, December 07, 2011 5:54 PM
To: Java Programming on and around the IBM i
Subject: RE: Is there an key store that is similar to "Windows-MY" in java on the i?
Like EIM (Enterprise Indentity Manager)?
Also, there is an i/OS API that will store it for you encrypted. If you need the name, I'll ask Vern. He's been doing a lot of work with single-signon lately.
-----Original Message-----
From: java400-l-bounces@xxxxxxxxxxxx [mailto:java400-l-bounces@xxxxxxxxxxxx] On Behalf Of David Gibbs
Sent: Wednesday, December 07, 2011 3:49 PM
To: Java Programming on and around the IBM i
Subject: Re: Is there an key store that is similar to "Windows-MY" in java on the i?
On 12/7/2011 3:30 PM, Dan Kimmel wrote:
Java includes the keytool utility which allows you to create a
keystore. I've only used the keystore and keytool utility for creating
and storing certificates. I don't know about userid/password
credentials. I use the certificates in a keystore to sign applet jar
files with the ant signjar tool.
Yeah, but I don't want to force the user to have to create a keystore & set a password.
I want to use a keystore that is bound to their user id (like Windows) so the encryption is automatic.
david
midrange.com
