Download the JDK
Search the Tutorials
Hide the TOC
Exchanging Files
Steps for the Contract Sender
Create a JAR File Containing the Contract
Generate Keys
Sign the JAR File
Export the Public Key Certificate
Steps for the Contract Receiver
Import the Certificate as a Trusted Certificate
Verify the JAR File Signature
Trail: Security Features in Java SE
Lesson: Exchanging Files

> If you want to electronically send an important document, (like a Contract) to someone else, it is a good idea to digitally "sign" the document, so your recipient can check that the document indeed came from you and was not altered in transit.

> This lesson shows you how to use Security tools for the exchange of an important document, in this case a contract.

> You first pretend that you are the contract sender, Stan Smith. This lesson shows the steps Stan would use to put the contract in a JAR file, sign it, and export the public key certificate for the public key corresponding to the private key used to sign the JAR file.

> Then you pretend that you are Ruth, who has received the signed JAR file and the certificate. You'll use `keytool` to import the certificate into Ruth's keystore in an entry aliased by `stan`, and use the `jarsigner` tool to verify the signature.

> For further information about digital signatures, certificates, keystores, and the tools, see the API and Tools Use for Secure Code and File Exchanges lesson.

> > Note: This lesson assumes that you execute all commands from within the same directory.

> Here are the steps:

> - Steps for the Contract Sender

> - Steps for the Contract Receiver

Previous page: Previous Lesson
Next page: Steps for the Contract Sender