Invantive EstateOm gegevens te kunnen downloaden en uploaden via de Exact Online webservice is het nodig om het certificaat van Exact Online bekend te maken bij Tomcat. Dit gaat het eenvoudigst met het programma InstallCert. Voer de volgende stappen uit:
•Start InstallCert met de naam van de https-host van Exact Online:
C:\> java InstallCert start.exactonline.nl
InstallCert.main()C:\Program Files\Java\jre6
Loading KeyStore C:\Program Files\Java\jre6\lib\security\cacerts...
Opening connection to start.exactonline.nl:443...
Starting SSL handshake...
No errors, certificate is already trusted
Server sent 2 certificate(s):
1 Subject CN=start.exactonline.nl, OU=Terms of use at www.verisign.com/rpa (c)0
5, OU=System Support, O=Exact Holding N.V., L=Delft, ST=Zuid Holland, C=NL, SERI
ALNUMBER="27234422 0000", OID.2.5.4.15="V1.0, Clause 5.(b)", OID.1.3.6.1.4.1.31
1.60.2.1.3=NL
Issuer CN=VeriSign Class 3 Extended Validation SSL SGC CA, OU=Terms of use a
t https://www.verisign.com/rpa (c)06, OU=VeriSign Trust Network, O="VeriSign, In
c.", C=US
sha1 ce 97 17 5d 25 ab 40 75 25 72 c9 dc 58 ca b5 3d 0c 98 cb c0
md5 d7 5e 76 79 b0 68 0b 24 5f 00 51 2c 40 7e e0 9d
2 Subject CN=VeriSign Class 3 Extended Validation SSL SGC CA, OU=Terms of use a
t https://www.verisign.com/rpa (c)06, OU=VeriSign Trust Network, O="VeriSign, In
c.", C=US
Issuer CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="
(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O
="VeriSign, Inc.", C=US
sha1 b1 80 39 89 98 31 f1 52 61 46 67 cf 23 ff ce a2 b0 e7 3d ab
md5 ca d5 a7 99 dd 90 93 60 b8 7c 31 9b de d5 f3 2f
Enter certificate to add to trusted keystore or 'q' to quit: [1]
1
[
[
Version: V3
Subject: CN=start.exactonline.nl, OU=Terms of use at www.verisign.com/rpa (c)0
5, OU=System Support, O=Exact Holding N.V., L=Delft, ST=Zuid Holland, C=NL, SERI
ALNUMBER="27234422 0000", OID.2.5.4.15="V1.0, Clause 5.(b)", OID.1.3.6.1.4.1.31
1.60.2.1.3=NL
Signature Algorithm: SHA1withRSA, OID = 1.2.840.113549.1.1.5
Key: Sun RSA public key, 2048 bits
modulus: 229618351194755793110732328671291907363055699759505232740197622086148
79427558526671034616745203462293046629390507241953409736965443093593292666107075
94936342177852803957324194141639111752898019365880546432743505299645801785250252
95149773045854836861163047128252941038378529884044593905618225420399364724195266
43421570980579592827170950088290348526452946324760089598170554188540975803412342
73584185577966203129850174877114748109388372427892071246722567187468748001030296
70646220680965576792590842003670073365115203520690271212743726706395785808073220
24024857209128048442631563744978155389655333921137766782334474038613
public exponent: 65537
Validity: [From: Mon Apr 27 02:00:00 CEST 2009,
To: Sun Jun 27 01:59:59 CEST 2010]
Issuer: CN=VeriSign Class 3 Extended Validation SSL SGC CA, OU=Terms of use at
https://www.verisign.com/rpa (c)06, OU=VeriSign Trust Network, O="VeriSign, Inc
.", C=US
SerialNumber: [ 0a35a4ef 6cbf483d 506e94fb 52a9b3bf]
Certificate Extensions: 8
[1]: ObjectId: 1.3.6.1.5.5.7.1.12 Criticality=false
Extension unknown: DER encoded OCTET string =
0000: 04 62 30 60 A1 5E A0 5C 30 5A 30 58 30 56 16 09 .b0`.^.\0Z0X0V..
0010: 69 6D 61 67 65 2F 67 69 66 30 21 30 1F 30 07 06 image/gif0!0.0..
0020: 05 2B 0E 03 02 1A 04 14 4B 6B B9 28 96 06 0C BB .+......Kk.(....
0030: D0 52 38 9B 29 AC 4B 07 8B 21 05 18 30 26 16 24 .R8.).K..!..0&.$
0040: 68 74 74 70 3A 2F 2F 6C 6F 67 6F 2E 76 65 72 69 http://logo.veri
0050: 73 69 67 6E 2E 63 6F 6D 2F 76 73 6C 6F 67 6F 31 sign.com/vslogo1
0060: 2E 67 69 66 .gif
[2]: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: 4E 43 C8 1D 76 EF 37 53 7A 4F F2 58 6F 94 F3 38 NC..v.7SzO.Xo..8
0010: E2 D5 BD DF ....
]
]
[3]: ObjectId: 2.5.29.31 Criticality=false
CRLDistributionPoints [
[DistributionPoint:
[URIName: http://EVIntl-crl.verisign.com/EVIntl2006.crl]
]]
[4]: ObjectId: 2.5.29.37 Criticality=false
ExtendedKeyUsages [
serverAuth
clientAuth
2.16.840.1.113730.4.1
1.3.6.1.4.1.311.10.3.3
]
[5]: ObjectId: 2.5.29.32 Criticality=false
CertificatePolicies [
[CertificatePolicyId: [2.16.840.1.113733.1.7.23.6]
[PolicyQualifierInfo: [
qualifierID: 1.3.6.1.5.5.7.2.1
qualifier: 0000: 16 1C 68 74 74 70 73 3A 2F 2F 77 77 77 2E 76 65 ..https://
www.ve
0010: 72 69 73 69 67 6E 2E 63 6F 6D 2F 63 70 73 risign.com/cps
]] ]
]
[6]: ObjectId: 2.5.29.15 Criticality=false
KeyUsage [
DigitalSignature
Key_Encipherment
]
[7]: ObjectId: 1.3.6.1.5.5.7.1.1 Criticality=false
AuthorityInfoAccess [
[
accessMethod: 1.3.6.1.5.5.7.48.1
accessLocation: URIName: http://ocsp.verisign.com,
accessMethod: 1.3.6.1.5.5.7.48.2
accessLocation: URIName: http://EVIntl-aia.verisign.com/EVIntl2006.cer]
]
[8]: ObjectId: 2.5.29.19 Criticality=false
BasicConstraints:[
CA:false
PathLen: undefined
]
]
Algorithm: [SHA1withRSA]
Signature:
0000: 01 98 53 52 B1 81 D1 8A 8C A8 F9 8B 5E BA 03 1F ..SR........^...
0010: CA 21 75 64 DC 2D 6B 98 4E 78 B4 97 A7 87 72 BA .!ud.-k.Nx....r.
0020: 55 46 0D 4E 8E 3E 9A E7 50 A5 8C 38 9F 3E 49 8D UF.N.>..P..8.>I.
0030: 67 3F 97 F3 66 3F 02 3B DF 85 6F A2 28 0C 6E D4 g?..f?.;..o.(.n.
0040: 4A 6F E5 DF 15 67 7F D9 72 FD 7F 31 84 72 86 4E Jo...g..r..1.r.N
0050: FE 7B B6 AC 94 50 2F 07 7C 68 66 16 D3 86 31 04 .....P/..hf...1.
0060: 3F BD F3 9F 3E 96 F2 93 92 71 D1 3D 63 08 C8 DC ?...>....q.=c...
0070: 7B 9C 33 FE 52 42 73 47 4B E3 57 F3 88 C4 D3 8D ..3.RBsGK.W.....
0080: 2C 3E 8D DB 56 4D 2C D7 3A DA D2 D8 12 4A 47 F7 ,>..VM,.:....JG.
0090: EF 13 16 D6 1C DA 7D 08 76 46 02 C0 DA F2 88 DB ........vF......
00A0: 7D 23 9B FB 0D 9F FA A8 DC 57 71 7C A8 00 C8 2F .#.......Wq..../
00B0: 42 3E 35 E1 69 83 76 6A E8 FF 7A A1 39 77 96 1A B>5.i.vj..z.9w..
00C0: 57 AA BA C7 D3 68 9E D4 1F 8E 3A 42 05 5B E6 4F W....h....:B.[.O
00D0: 78 FB 10 D1 FE 81 E9 96 A7 21 F9 BC 02 F6 55 9F x........!....U.
00E0: 88 58 AE C9 43 7F D2 E8 50 50 97 DA DF 67 B6 AE .X..C...PP...g..
00F0: 2C 16 84 4F 82 17 61 18 35 2F CB E9 9C D6 77 11 ,..O..a.5/....w.
]
Added certificate to keystore C:\Program Files\Java\jre6\lib\security\cacerts us
ing alias 'start.exactonline.nl-1'
