Home/ Questions/Q 7782335
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-01T19:30:37+00:00

When I manually create a KeyManager , one of the steps is this: KeyManagerFactory.getInstance(SunX509)

  • 0

When I manually create a KeyManager, one of the steps is this: 

KeyManagerFactory.getInstance("SunX509")

This does not work on IBM jre where I need to specify “IbmX509”.
My questions:

  1. I read that this is called the “certificate encoding algorithm”. What does that mean? When is it used?
  2. What happens when the client is using the IBM algorithm and the server is using the Sun algorithm?

Thanks,
Doron

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    I read that this is called the "certificate encoding algorithm".

    No it isn’t. It is a key manager algorithm that defines both a provider and a content type, in this case "Sun" or "IBM" and X.509.

    Anyway the best solution is not to use either. Just use

    KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm());

    The KeyManager and KeyManagerFactory just deal with the local keystore/truststore. The peer doesn’t care about that, only about the certificates that are in them, and that only indirectly.

    • 0