<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0">
<base href="https://issues.shibboleth.net/jira">
<title>Message Title</title>
</head>
<body class="jira" style="color: #333333; font-family: Arial, sans-serif; font-size: 14px; line-height: 1.429">
<table id="background-table" cellpadding="0" cellspacing="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; background-color: #f5f5f5; border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt" bgcolor="#f5f5f5">
<!-- header here -->
<tbody>
<tr>
<td id="header-pattern-container" style="padding: 0px; border-collapse: collapse; padding: 10px 20px">
<table id="header-pattern" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="header-avatar-image-container" valign="top" style="padding: 0px; border-collapse: collapse; vertical-align: top; width: 32px; padding-right: 8px" width="32"> <img id="header-avatar-image" class="image_fix" src="cid:jira-generated-image-avatar-b003c1bf-a593-4567-8606-d79c8ef9bc83" height="32" width="32" border="0" style="border-radius: 3px; vertical-align: top"> </td>
<td id="header-text-container" valign="middle" style="padding: 0px; border-collapse: collapse; vertical-align: middle; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px"> <a class="user-hover" rel="takeshi@gakunin.nii.ac.jp" id="email_takeshi@gakunin.nii.ac.jp" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=takeshi%40gakunin.nii.ac.jp" style="color:#3b73af;; color: #3b73af; text-decoration: none">Takeshi Nishimura</a> <strong>commented</strong> on <a href="https://issues.shibboleth.net/jira/browse/IDP-1317" style="color: #3b73af; text-decoration: none"><img src="cid:jira-generated-image-avatar-79e426e5-1690-48ba-a396-95867b1739d9" height="16" width="16" border="0" align="absmiddle" alt="Improvement"> IDP-1317</a> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="email-content-container" style="padding: 0px; border-collapse: collapse; padding: 0 20px">
<table id="email-content-table" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; border-spacing: 0; border-collapse: separate">
<tbody>
<tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<td class="email-content-rounded-top mobile-expand" style="padding: 0px; border-collapse: collapse; color: #ffffff; padding: 0 15px 0 16px; height: 15px; background-color: #ffffff; border-left: 1px solid #cccccc; border-top: 1px solid #cccccc; border-right: 1px solid #cccccc; border-bottom: 0; border-top-right-radius: 5px; border-top-left-radius: 5px; height: 10px; line-height: 10px; padding: 0 15px 0 16px; mso-line-height-rule: exactly" height="10" bgcolor="#ffffff"> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff" bgcolor="#ffffff">
<table class="page-title-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td style="vertical-align: top;; padding: 0px; border-collapse: collapse; padding-right: 5px; font-size: 20px; line-height: 30px; mso-line-height-rule: exactly" class="page-title-pattern-header-container"> <span class="page-title-pattern-header" style="font-family: Arial, sans-serif; padding: 0; font-size: 20px; line-height: 30px; mso-text-raise: 2px; mso-line-height-rule: exactly; vertical-align: middle"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1317" style="color: #3b73af; text-decoration: none">Re: JCEKS is not recommended by Oracle JDK</a> </span> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="text-paragraph-pattern-top" class="email-content-main mobile-expand comment-top-pattern" style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff; border-bottom: none; padding-bottom: 0" bgcolor="#ffffff">
<table class="text-paragraph-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 2px">
<tbody>
<tr>
<td class="text-paragraph-pattern-container mobile-resize-text " style="padding: 0px; border-collapse: collapse; padding: 0 0 10px 0"> <p style="margin: 10px 0 0 0; margin-top: 0">Thanks for your comment. I agree.</p> <p style="margin: 10px 0 0 0">Though I don't know it is in the specification, keytool seems to generate a PKCS12 which contains 2 keys.</p>
<div class="preformatted panel" style="border-width: 1px;; border: 1px solid #cccccc; background: #f5f5f5; font-size: 12px; line-height: 1.333; font-family: monospace; border: 1px solid #cccccc; -moz-border-radius: 3px 3px 3px 3px; border-radius: 3px 3px 3px 3px; margin: 9px 0">
<div class="preformattedContent panelContent" style="padding: 9px 12px">
<pre style="margin: 10px 0 0 0; margin-top: 0; max-height: 30em; overflow: auto; white-space: pre-wrap; word-wrap: normal; white-space: pre; word-break: normal; word-wrap: break-word; word-break: break-word; white-space: pre-wrap">$ keytool -v -list -keystore /tmp/sealer.jks -storetype PKCS12
Enter keystore password:
Keystore type: PKCS12
Keystore provider: SunJSSE
Your keystore contains 2 entries
Alias name: secret3
Creation date: Jul 27, 2018
Entry type: SecretKeyEntry
Alias name: secret2
Creation date: Jul 27, 2018
Entry type: SecretKeyEntry
$ openssl asn1parse -i -inform der -in /tmp/sealer.jks
0:d=0 hl=4 l= 505 cons: SEQUENCE
4:d=1 hl=2 l= 1 prim: INTEGER :03
7:d=1 hl=4 l= 434 cons: SEQUENCE
11:d=2 hl=2 l= 9 prim: OBJECT :pkcs7-data
22:d=2 hl=4 l= 419 cons: cont [ 0 ]
26:d=3 hl=4 l= 415 prim: OCTET STRING [HEX DUMP]:...
445:d=1 hl=2 l= 62 cons: SEQUENCE
447:d=2 hl=2 l= 33 cons: SEQUENCE
449:d=3 hl=2 l= 9 cons: SEQUENCE
451:d=4 hl=2 l= 5 prim: OBJECT :sha1
458:d=4 hl=2 l= 0 prim: NULL
460:d=3 hl=2 l= 20 prim: OCTET STRING [HEX DUMP]:A740CE2D14F081E064855A6A6B2A81E86F40E7F0
482:d=2 hl=2 l= 20 prim: OCTET STRING [HEX DUMP]:7E2B23956513902DAD0BA8EE07F88343965CDCD5
504:d=2 hl=2 l= 3 prim: INTEGER :0186A0
$ openssl asn1parse -i -inform der -in /tmp/sealer.jks -strparse 26
0:d=0 hl=4 l= 411 cons: SEQUENCE
4:d=1 hl=4 l= 407 cons: SEQUENCE
8:d=2 hl=2 l= 9 prim: OBJECT :pkcs7-data
19:d=2 hl=4 l= 392 cons: cont [ 0 ]
23:d=3 hl=4 l= 388 prim: OCTET STRING [HEX DUMP]:...
$ openssl asn1parse -i -inform der -in /tmp/sealer.jks -strparse 53
0:d=0 hl=4 l= 384 cons: SEQUENCE
4:d=1 hl=3 l= 189 cons: SEQUENCE
7:d=2 hl=2 l= 11 prim: OBJECT :secretBag
20:d=2 hl=2 l= 106 cons: cont [ 0 ]
22:d=3 hl=2 l= 104 cons: SEQUENCE
24:d=4 hl=2 l= 11 prim: OBJECT :pkcs8ShroudedKeyBag
37:d=4 hl=2 l= 89 cons: cont [ 0 ]
39:d=5 hl=2 l= 87 prim: OCTET STRING [HEX DUMP]:...
128:d=2 hl=2 l= 66 cons: SET
130:d=3 hl=2 l= 29 cons: SEQUENCE
132:d=4 hl=2 l= 9 prim: OBJECT :friendlyName
143:d=4 hl=2 l= 16 cons: SET
145:d=5 hl=2 l= 14 prim: BMPSTRING
161:d=3 hl=2 l= 33 cons: SEQUENCE
163:d=4 hl=2 l= 9 prim: OBJECT :localKeyID
174:d=4 hl=2 l= 20 cons: SET
176:d=5 hl=2 l= 18 prim: OCTET STRING :Time 1532653408560
196:d=1 hl=3 l= 189 cons: SEQUENCE
199:d=2 hl=2 l= 11 prim: OBJECT :secretBag
212:d=2 hl=2 l= 106 cons: cont [ 0 ]
214:d=3 hl=2 l= 104 cons: SEQUENCE
216:d=4 hl=2 l= 11 prim: OBJECT :pkcs8ShroudedKeyBag
229:d=4 hl=2 l= 89 cons: cont [ 0 ]
231:d=5 hl=2 l= 87 prim: OCTET STRING [HEX DUMP]:...
320:d=2 hl=2 l= 66 cons: SET
322:d=3 hl=2 l= 29 cons: SEQUENCE
324:d=4 hl=2 l= 9 prim: OBJECT :friendlyName
335:d=4 hl=2 l= 16 cons: SET
337:d=5 hl=2 l= 14 prim: BMPSTRING
353:d=3 hl=2 l= 33 cons: SEQUENCE
355:d=4 hl=2 l= 9 prim: OBJECT :localKeyID
366:d=4 hl=2 l= 20 cons: SET
368:d=5 hl=2 l= 18 prim: OCTET STRING :Time 1532653409074
$ dd if=/tmp/sealer.jks bs=1 skip=202 count=16 | od -c
0000000 036 016 \0 s \0 e \0 c \0 r \0 e \0 t \0 3
$ dd if=/tmp/sealer.jks bs=1 skip=394 count=16 | od -c
0000000 036 016 \0 s \0 e \0 c \0 r \0 e \0 t \0 2
$ openssl asn1parse -i -inform der -in /tmp/sealer.jks -strparse 96
0:d=0 hl=2 l= 85 cons: SEQUENCE
2:d=1 hl=2 l= 41 cons: SEQUENCE
4:d=2 hl=2 l= 10 prim: OBJECT :pbeWithSHA1And3-KeyTripleDES-CBC
16:d=2 hl=2 l= 27 cons: SEQUENCE
18:d=3 hl=2 l= 20 prim: OCTET STRING [HEX DUMP]:B257D210E9A8AA7236B4B974F4378C88976A0091
40:d=3 hl=2 l= 3 prim: INTEGER :C350
45:d=1 hl=2 l= 40 prim: OCTET STRING [HEX DUMP]:CA16469E9125473E6B6DBA70E6B0C57040FCAC17F0A77B5B9ABBB6646F8E828781E67F4B85C85B4D
</pre>
</div>
</div> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff" bgcolor="#ffffff">
<table id="actions-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px">
<tbody>
<tr>
<td id="actions-pattern-container" valign="middle" style="padding: 0px; border-collapse: collapse; padding: 10px 0 10px 24px; vertical-align: middle; padding-left: 0">
<table align="left" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td class="actions-pattern-action-icon-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 0; vertical-align: middle"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1317#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none"> <img class="actions-pattern-action-icon-image" src="cid:jira-generated-image-static-comment-icon-b823a24e-0548-40ef-862f-208883602dc6" alt="Add Comment" title="Add Comment" height="16" width="16" border="0" style="vertical-align: middle"> </a> </td>
<td class="actions-pattern-action-text-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 4px; padding-left: 5px"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1317#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none">Add Comment</a> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table> </td>
</tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<tr>
<td class="email-content-rounded-bottom mobile-expand" style="padding: 0px; border-collapse: collapse; color: #ffffff; padding: 0 15px 0 16px; height: 5px; line-height: 5px; background-color: #ffffff; border-top: 0; border-left: 1px solid #cccccc; border-bottom: 1px solid #cccccc; border-right: 1px solid #cccccc; border-bottom-right-radius: 5px; border-bottom-left-radius: 5px; mso-line-height-rule: exactly" height="5" bgcolor="#ffffff"> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="footer-pattern" style="padding: 0px; border-collapse: collapse; padding: 12px 20px">
<table id="footer-pattern-container" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="footer-pattern-text" class="mobile-resize-text" width="100%" style="padding: 0px; border-collapse: collapse; color: #999999; font-size: 12px; line-height: 18px; font-family: Arial, sans-serif; mso-line-height-rule: exactly; mso-text-raise: 2px"> This message was sent by Atlassian JIRA <span id="footer-build-information">(v7.4.2#74004-<span title="586975da6d5c632f4f0de24a42c40182e6b9ead0" data-commit-id="586975da6d5c632f4f0de24a42c40182e6b9ead0}">sha1:586975d</span>)</span> </td>
<td id="footer-pattern-logo-desktop-container" valign="top" style="padding: 0px; border-collapse: collapse; padding-left: 20px; vertical-align: top">
<table style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="footer-pattern-logo-desktop-padding" style="padding: 0px; border-collapse: collapse; padding-top: 3px"> <img id="footer-pattern-logo-desktop" src="cid:jira-generated-image-static-footer-desktop-logo-39797e12-3d96-4cab-88e7-595472c45a19" alt="Atlassian logo" title="Atlassian logo" width="169" height="36" class="image_fix"> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table>
</body>
</html>