Using certificate with default Bootstrap

[update4j]

Using certificate with default Bootstrap

[mordechaim]

Assuming BASE64PUBLICKEY is just placeholder text.

The default bootstrap only supports X.509 certificates and in no way attempts to be a full fledged key-type detection framework.

Note: Certificates are more than just public keys. X.509 certs is the standard type generated with Java's keytool command.

Unfortunately, if you need different key types you cannot use the default bootstrap; although nothing holds you back from copying the source code and making your changes and use it as a custom bootstrap.

[painos]

Thank you, I think I got it now. And yes it is just a placeholder.

I manged to create keypair with keytool and exported a public key cer -file. On dev machine I get private key from a keystore when generating a new conf file. Works like a charm.

I store the public key .cer in the application folder and it can be bundled with installation. Just to make sure; if for any reason I want change the keypair is it also safe to push a new public key .cer -file with rest of the updates or are there some security concerns?

[mordechaim]

Shouldn't be any security concern. The files are not replaced until the whole update download and validate process is done. So update4j will not see your new key until next update is performed.