Digital Certificates - newbie questions
Hi, I am trying to understand how Java Server goes about managing Digital Certificates
Q1. Java comes with its own Key Store of Root Certificates ( cacerts ). However do you need to create a separate key store for User Certificates ? In my case there is a Key Store on my Java Server called adkeystore.dat which seems to be holding my User Certificates ?
Q2. How do you create such a User Certificate Key Store – is it with the keytool command of Java or say a tool such as openSSL ?
Q3. Can a Java Server have multiple User Certificate Stores ?
Q4. When my Java Server downloads a signed JAR to my Web Browser, the Web Browser states it does not recognise the Certificate and offers you the ability to trust the Source. I presume if I trust the source it is still not loading the Certificate into the Certificate Repository of the Web Browser and I would still have to do that manually ?