Java Security with KeyStore and public certificates aliases

Question

I'm facing a problem with java security in keystore aliases.

My problem is that we are getting keystore aliases from a browser but when we get the list sometimes two .pfx certificates have the same alias because they are both for the same company but one is for signin and other is for encryption. This means that when we try to differentiate uniquely it fails because the keystore.aliases method returns the same for both aliases so it can't tell which to return.

Answer 1

For signing you will need a PrivateKey entry. Encryption you only need the recipients PublicKey . If you examine the Keystore entry type you should be able to tell which is which.

If you can only compare the certificates you will need to look at the X509 cert usage and see if that helps.