Page History

Creating a certificate signed by a trusted third party

To create a certificate signed by a trusted third party, first follow the steps under #Creating a self signed certificate and then continue with the steps below:

...

1. Browse to http://www.instantssl.com
2. Click 'Instant SSL' button (top right, under Free SSL), or click 'Free SSL' to test all this first before paying for it.For 'Instant SSL' select on "Code Signing Certificate"
   
   

   1. Select your duration (1, 2, or 3 years).

      Note
      Make sure the validity is shorter than the validity you chose when creating the keystore, otherwise you are paying for more that you will get!!!

3. Copy the contents of the mykeystore.csr file into the form where it says to copy the CSR to.
4. Select OTHER for the software used to generate it.
5. Deselect all the checks of step 4 on the web page (newsletters and other stuff).
6. Fill in the rest and follow the instructions (corporate details, etc.).

...

1. Note all the "parents" of the response certificate in order (from the first parent to the CA root) - you can see them in windows by opening the .crt file (e.g. servoy.crt) and see the certification path (a "tree" with all the "parents").
2. Open the certificate in an editor - let's call it target certificate.
3. For each parent in the parent's list (taken from the "first" parent up to the CA root)
   1. add its content into the target certificate's file at the beginning of the file; the content is from "--

...

1. 1. BEGIN CERTIFICATE

...

1. 1. -" to "-

...

1. 1. END CERTIFICATE

...

1. 1. --" (new lines are allowed between certificates' content)
2. run the command again: keytool -import -alias MyPlugins -keystore mykeystore.ks -trustcacerts -file mykeystore.crt

...