> A few more questions : does keytool generate a .crt too ?

No.  Keytool generates keystores in the format you specify.  If you're
new to keytool, you should review
http://java.sun.com/j2se/1.5.0/docs/tooldocs/solaris/keytool.html.

> Adding X509authenticationHandler will resolve my redirect loop problem ?

No.  Do not add that handler.  I only cited that page since it has
some helpful information on certificate management in Java.

> And need I really a certificate.crt or just my .keystore is suffisant ?

Java deals exclusively with keystores.  You can't really understand
PKI in Java without reading
http://java.sun.com/j2se/1.5.0/docs/guide/security/jsse/JSSERefGuide.html.

M

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to