elliptic curve certificates for TLS | Telit Cinterion IoT Developer Community
August 11, 2020 - 12:59pm, 1210 views
Hello, please advise if it is possible to upload ec certs to pls8 module? cmd_ipcertmgr.jar refuses to do that with the following message:
No installed provider supports this key: sun.security.pkcs11.P11Key$P11ECPrivateKey
$ java -version
java version "1.6.0_41"
OpenJDK Runtime Environment (IcedTea6 1.13.13) (6b41-1.13.13-0ubuntu0.14.04.1)
OpenJDK 64-Bit Server VM (build 23.41-b41, mixed mode)
$ keytool -list -keystore test2.ks
Enter keystore password:
Keystore type: JKS
Keystore provider: SUN
Your keystore contains 4 entries
ca, Aug 11, 2020, trustedCertEntry,
Certificate fingerprint (SHA1): B1:75:CF:D6:F3:3F:DB:22:DA:BC:06:63:D1:88:E7:8F:70:B3:B9:4E
srv, Aug 11, 2020, trustedCertEntry,
Certificate fingerprint (SHA1): FA:1A:29:08:EA:1D:48:4F:EE:C0:BB:EB:6F:7C:0F:72:1A:D4:14:E2
client, Aug 11, 2020, PrivateKeyEntry,
Certificate fingerprint (SHA1): 19:F6:E3:B3:A6:6F:BB:9E:88:7F:6B:42:4E:B7:42:CF:39:58:0C:5D
inta, Aug 11, 2020, trustedCertEntry,
Certificate fingerprint (SHA1): D6:26:6E:B0:63:7A:00:5B:33:F0:59:BB:D1:78:2C:F8:98:F1:F4:8A
Hi,
According to AN62 the signature algorithm used when certificates are loaded to the module is RSA-SHA1, so the client certificate (the one installed on profile 0 together with private key) ***** to be RSA. But it should be possible to install EC server certificates.
Best regards,
Adam