What is SunX509 used for and can it work with parties using IbmX509?

Question

When I manually create a KeyManager, one of the steps is this:

KeyManagerFactory.getInstance("SunX509")

This does not work on IBM jre where I need to specify "IbmX509".
My questions:

1. I read that this is called the "certificate encoding algorithm". What does that mean? When is it used?
2. What happens when the client is using the IBM algorithm and the server is using the Sun algorithm?

Thanks,
Doron

Medullary

Answer 1

I read that this is called the "certificate encoding algorithm".

No it isn't. It is a key manager algorithm that defines both a provider and a content type, in this case "Sun" or "IBM" and X.509.

Anyway the best solution is not to use either. Just use

KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm());

The KeyManager and KeyManagerFactory just deal with the local keystore/truststore. The peer doesn't care about that, only about the certificates that are in them, and that only indirectly.

Poohpooh

Thanks for the answer. Why would someone ever want to change this - i.e. why is it a parameter? – Medullary

@DoronTohar PCKS#11 for one reason. – Poohpooh