Java missing support for future Initial Enrollment from SCEP protocol

[Javex]

For the Inital Enrollment feature of the SCEP protocol it is necessary to build a PKCS#10 request with a password extension. This can be done by OpenSSL but the Java Keystore creates its certificates by its internal method with keytool.

There are two solutions for this problem:

Either the JKSEngine is fixed so it works both under Windows (see agruener2000/JKSEngine#1) and is fixed to be more flexible regarding the keystore (see agruener2000/JKSEngine#2).

The other solution is to create an option to either use an external or internal method and allow the Java keystore to use generate the key inside the keystore or outside of it. This would then allow for CSR generation by OpenSSL and importing the keys later on. This is probably the easier solution, but fixing the JKSEngine would be nice, too.

[mbartosch]

postponed to v1.2