{"id":25,"date":"2012-04-30T14:23:00","date_gmt":"2012-04-30T14:23:00","guid":{"rendered":""},"modified":"2021-08-31T10:12:45","modified_gmt":"2021-08-31T09:12:45","slug":"making-ikeyman-work-on-macos","status":"publish","type":"post","link":"https:\/\/www.srivittal.com\/wp\/?p=25","title":{"rendered":"Making iKeyman work on MacOS"},"content":{"rendered":"
A word of warning and disclaimer before I proceed.<\/p>\n

“I’m not sure if the following steps violate any licensing restrictions and I recommend you check with your own suppliers as to the licenses and permissions of use. I played around with this to see if it would work and used only a trial version as a Proof of Concept. I have since then deleted the installation on my PC as my PoC was complete.
Please see the following page for an official disclaimer. Proceed with caution”<\/p>\n

The requirement was this – How to manage private and public keys and certificates for SSL, signing etc., and I could not find a better tool than IBM’s ikeyman. Although Java’s own keytool is as powerful, sometimes simple things like exporting a private key is a monstrous task in keytool. If you have better ways of doing it, I would be glad to hear about it.<\/p>\n

Hence I downloaded the Trial version of IBM HTTP Server 7.0.0.0 from the IBM website. The version I downloaded was for Linux X86. Since I use an Apple Mac, although I could untar all the files, I could not run the install command directly. However, I used the java -jar setup.jar command to start the IBM installer on the mac. See the following screenshot.<\/p>\n

 <\/a><\/div>\n
<\/div>\n
Continue with the rest of the installation and ignore the unsupported operating system message.  Finally, click finish to complete the installation. You will also get a Partial Installation Success message. This is because although the setup program created the directories and the files correctly, it did not replace important placeholders within the scripts in the bin directory. <\/div>\n
<\/div>\n
I had to go into the IBM\/HTTPServer\/bin directory and replace all occurrences of @@SERVERROOT@@, @@ServerRoot@@ and @@GSKLIBPATH@@ with the actual installation path.<\/div>\n
<\/div>\n
Once that is done, copy the following Jars from within the IBM\/HTTPServer\/java\/jre\/lib directory (Some may be in \/lib\/ext and some may be in \/lib\/security<\/b>) and copy them to \/System\/Library\/Frameworks\/JavaVM.framework\/Versions\/CurrentJDK\/Home\/lib\/ext directory. <\/div>\n
<\/div>\n
<\/div>\n
ibmpkcs.jar<\/div>\n

IBMKeyManagementServer.jar<\/p>\n

gskikm.jar<\/div>\n
ibmpkcs11impl.jar<\/div>\n
local_policy.jar<\/div>\n

US_export_policy.jar<\/p>\n

ibmcmsprovider.jar<\/div>\n
ibmsaslprovider.jar<\/div>\n
localedata.jar<\/div>\n

apple_provider.jar<\/p>\n

ibmjcefips.jar<\/div>\n
ibmspnego.jar<\/div>\n
sunjce_provider.jar<\/div>\n

dnsns.jar<\/p>\n

ibmjcefw.jar<\/div>\n
ibmxmlencprovider.jar<\/div>\n
sunpkcs11.jar<\/div>\n

dtfj-interface.jar<\/p>\n

ibmjceprovider.jar<\/div>\n
iwsorbutil.jar <\/div>\n
xmlencfw.jar<\/div>\n

dtfj.jar<\/p>\n

ibmkeycert.jar<\/div>\n
jaccess.jar<\/div>\n

If any of the files are found in the directory already, ignore them. Now go to IBM\/HTTPServer\/gsk7\/bin directory and run gsk7ikm and voila you will get the good old ikeyman.<\/p>\n

<\/div>\n","protected":false},"excerpt":{"rendered":"

A word of warning and disclaimer before I proceed. “I’m not sure if the following steps violate any licensing restrictions and I recommend you check with your own suppliers as to the licenses and permissions of use. I played around with this to see if it would work and used only a trial version as …<\/p>\n","protected":false},"author":2,"featured_media":116,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20,41,40,26],"tags":[],"class_list":["post-25","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ibm","category-ibm-http-server","category-ihs","category-mac-osx","entry entry-center"],"_links":{"self":[{"href":"https:\/\/www.srivittal.com\/wp\/index.php?rest_route=\/wp\/v2\/posts\/25","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.srivittal.com\/wp\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.srivittal.com\/wp\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.srivittal.com\/wp\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.srivittal.com\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=25"}],"version-history":[{"count":2,"href":"https:\/\/www.srivittal.com\/wp\/index.php?rest_route=\/wp\/v2\/posts\/25\/revisions"}],"predecessor-version":[{"id":186,"href":"https:\/\/www.srivittal.com\/wp\/index.php?rest_route=\/wp\/v2\/posts\/25\/revisions\/186"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.srivittal.com\/wp\/index.php?rest_route=\/wp\/v2\/media\/116"}],"wp:attachment":[{"href":"https:\/\/www.srivittal.com\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=25"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.srivittal.com\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=25"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.srivittal.com\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=25"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}