Thawte : Java Glossary

Thawte is a company that issues digital certificates. It sells several types including web server, Netscape Java application code signing and Internet Explorer Java application code signing. It sometimes takes months to jump through all the hoops to get one. I suggest you start the process early in your development cycle if you will need any certificates. Thawte is based in South Africa. I found it exceedingly reluctant to answer phone calls or email. Their certificates are cheaper than Verisign’s. Unfortunately Verisign bought them out in 2000-02, so this state of affairs won’t last long.

Initially each type of certificate had different properties aimed at the different browsers — MS Authenticode with Authenticode x509 extensions aimed at IE (Internet Explorer) applications, Netscape Object Signing with Netscape specific extensions for Java meant to run with the Netscape/Java version 1.1 or later plug-in, and Java 2 certs aimed at the Java version 1.2 or later plug-in (Java version 1.3 signing tools).

If you buy a Thawte Microsoft Authenticode X.509 certificate, you can turn it into a Netscape Jar signing certificate, or a Sun Jar signing certificate.

Java 2 certs are based on the DSA (Digital Signature Algorithm) crypto algorithm and are thus not compatible with Netscape and MS codesigning tools. A Java 2 cert used in conjunction with the tools provided by Java version 1.3 will enable you to sign code.

For Java 2 / Plugin 1.2 you’d need the Java 2 certs and Java version 1.3.Java version 1.2 or later does not support Thawte cert chains — the top level DSA CA (Certificate Authority) root is signed by Thawte top level RSA (Rivest, Shamir and Adelman) root and Java version 1.2 or later cannot verify the signature.

The Thawte Root code signing certificate was inadvertently omitted from Java version 1.5 beta. You can download a copy and install it in your cacerts.. See updating root certificates for details.

certificate
digital signature
KeyTool IUI: third party GUI version of keytool
keytool.exe
Verisign

	You can get the freshest copy of this page from:	or possibly from your local J: drive (Java virtual drive/mindprod.com website mirror)
	http://mindprod.com/jgloss/thawte.html	J:\mindprod\jgloss\thawte.html
	Please email your feedback for publication, letters to the editor, errors, omissions, typos, formatting errors, ambiguities, unclear wording, broken/redirected link reports, suggestions to improve this page or comments to Roedy Green : . If you want your message, your name or email kept confidential, not considered for public posting, please explicitly specify that. Unless you state otherwise, I will treat your message as a letter to the editor that I may or may not publish in the feedback section. After that, it will be too late to retract it. If you disagree with something I said, please quote it and cite the web page where you found it, tell me why you think it is wrong, and, if possible, provide some supporting evidence. Threatening to kill me or spouting obscenities has yet to persuade me to change my mind.
	Canadian Mind Products
	mindprod.com IP:[65.110.21.43]
view Blog	Your face IP:[38.107.179.212]
Feedback	You are visitor number 13,249.