1 <?xml version="1.0" encoding="utf-8"?>

     2 <!-- Copyright (c) 2007-2010 Nokia Corporation and/or its subsidiary(-ies) All rights reserved. -->

     3 <!-- This component and the accompanying materials are made available under the terms of the License 

     4 "Eclipse Public License v1.0" which accompanies this distribution, 

     5 and is available at the URL "http://www.eclipse.org/legal/epl-v10.html". -->

     6 <!-- Initial Contributors:

     7     Nokia Corporation - initial contribution.

     8 Contributors: 

     9 -->

    10 <!DOCTYPE task

    11   PUBLIC "-//OASIS//DTD DITA Task//EN" "task.dtd">

    12 <task id="GUID-13BDBFA4-49FE-4D62-8B5F-BE3DF3ABAF3E" xml:lang="en"><title>Converting

    13 a Certificate Store into Human-Readable Form</title><abstract><p>To view details of the certificates that comprise the certificate

    14 store, it is necessary to convert the certificate store files in binary form

    15 to human-readable form. </p><p>The following examples show how to use certapp

    16 to convert a certificate store into human-readable form:</p><ul>

    17 <li><p>This example converts a file certificate store (<codeph>cacerts.dat</codeph>)

    18 into human-readable form (<codeph>cacerts.txt</codeph>). The input files are <codeph>cacerts.dat</codeph> and <codeph>cerclients.dat</codeph>,

    19 which maps the application UIDs in the certificates to application description

    20 strings.  </p><p><cmdname> &gt; certapp --bcertclients=certclients.dat --bfilecertstore=cacerts.dat

    21 --out --hcertclients=certclients.txt --hfilecertstore=cacerts.txt</cmdname> </p></li>

    22 <li><p>The following example shows how to convert the SWI certificate store

    23 file into human-readable form for a device which also has a writable data

    24 file (<codeph>writable.dat</codeph>) installed. </p><p><cmdname>&gt; certapp

    25 --bcertclients=certclients.dat --bswicertstore=swicertstore.dat --bswicertstore=writable.dat

    26 --out --hcertclients=certclients.txt --hswicertstore=swicertstore.txt</cmdname> </p><p>Specify

    27 the SWI certificate store files in ascending priority order, that is, specify

    28 the base SWI certificate store file first and then the writable SWI certificate

    29 store file. The tool automatically processes the writable SWI certificate

    30 store file before the base SWI certificate store file. </p></li>

    31 </ul><p><b>Notes:</b></p><ul>

    32 <li><p>Along with the certificate store file, separate files are also created

    33 for the certificates of the store. The certificate file types depend on the

    34 output file type. For example, if the output file is <codeph>certclients.txt</codeph>,

    35 x509 certificates are dumped in files with names like <codeph>certclients_certN.der</codeph>,

    36 where N is the entry number. If you specify the <codeph>--pemout</codeph> command-line

    37 option, then the extension of the certificate file is <codeph>.pem</codeph>.

    38 If the certificate type is not <codeph>EX509Certificate</codeph>, then the

    39 extension is <codeph>.dat</codeph>. </p></li>

    40 <li><p>For details of the formats followed by the various certificate store

    41 files, see <xref href="GUID-B1B3C5E6-9F38-5A55-A30E-4C7591B446CC.dita">Certificate

    42 Store Human-Readable File Formats</xref>. </p></li>

    43 </ul></abstract><prolog><metadata><keywords/></metadata></prolog><related-links>

    44 <link href="GUID-7C96B363-7891-50D3-A40F-92B9CBC4624C.dita"><linktext>Using certapp</linktext>

    45 </link>

    46 </related-links></task>