Accessing Java Key Store using .NET

Question

_{Wednesday, March 26, 2014 2:22 PM}

Hello All

Can someone please help me with the following question if possible.

I am writting a SCOM monitor to look inside a Java Key Store (.ks file) on Windows Servers to check which certificates will expire within X days. First off I though from PowerShell run KeyTool.exe with the -list and -v parameters capture the text based output parse with regex and turn powershell objects with relevent note properties e.g. NotAfter.

The first pproblem with the above approach is KeyTool.exe want a password entered on the command line in clear text.

Then I came across a post saying you can interface with the Key Store API via .NET  (cannot locate post at the moment). This sounds like a good option as I can then include some C# code on my PowerShell script if necessary.

Basically I want to pull out details on the certs in the java keystore and check if any are going to expire within 30 days, and if so return the the CommonName, NotAfter Date, Issuing CA, etc.. using Powershell/C#, or VBScript

Thanks All

Ernie

All replies (2)

_{Thursday, March 27, 2014 6:32 AM ✅Answered}

Hi,

 I am no expert on this, but I hope the following references could give you some sparks:

http://www.codeproject.com/Articles/6623/Porting-Java-Public-Key-Hash-to-C-NET

http://stackoverflow.com/questions/537040/how-to-connect-to-a-secure-website-using-ssl-in-java-with-a-pkcs12-file

Best Wishes!

We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click HERE to participate the survey. Thanks<br/> MSDN Community Support<br/> <br/> Please remember to "Mark as Answer" the responses that resolved your issue. It is a common way to recognize those who have helped you, and makes it easier for other visitors to find the resolution later.

_{Thursday, March 27, 2014 8:00 AM}

Hello Anne

Thank you for the reply I will take a look at the links

Ernie