Create X509 Public key certificate from generated key pair about pkcs11interop

[jariq]

Hello, it is not possible to generate X.509 certificate with a PKCS#11 library alone - you need to use an additional general purpose cryptographic library such as for example BouncyCastle. AFAIK there is no complete sample for certificate generation available but there is a sample for a PKCS#10 certification request generation which might be helpful for you because it demonstrates the integration of Pkcs11Interop and BouncyCastle libraries.

[lkn2993]

but I'm a little confused
how can bouncy castle integrate with this library, even a little explanation is good.
and the example is incomplete, it doesn't generate any valid certificate :)

[lkn2993]

let me explain this a little bit.
the bouncycastle example for signing and generating an X509Ver3 certificate is found here:
http://stackoverflow.com/questions/7230330/sign-csr-using-bouncy-castle

Its just the fact that I can't figure out a way to implement this using the pkcs11interop lib.
Thanks for response btw

[jariq]

how can bouncy castle integrate with this library, even a little explanation is good.

Have you examined the code of Pkcs11Interop.PkiUtils project I was linking in my previous comment?

[lkn2993]

It says "create" not import :)
Everyone knows how to import certificate, but... nobody knows how to create one?

[lkn2993]

that's fine I will find another way :)