I need to manage (create, store and import/export) the digital
Certificates in a web based application.
I know that Sun's keytool can be used to create digital certificates
X.509. But it is command line tool.
Is there any way we can use keytool to create certificates
programmatically using some API (except Runtime.exec())?
Also, there is an open source which allows certificate generation,
BouncyCastle (http://www.bouncycastle.org). Any experience with
BouncyCastle?
I also need to store certificates. I can use KeyStore. Any other
options are available?

Thanks in advance for your help and ideas, 
Vimal Gupta

Hi there,

unfortunately, there is no public API for the keytool which would allow you 
to create a certificate.

In case you don't specifically need to generate X.509 certificates, but just 
a digitally signed object, please consider the TrueLicense package at 
http://truelicense.dev.java.net. The classes 
de.schlichtherle.xml.GenericCertificate and 
de.schlichtherle.license.LicenseNotary would solve your problem then.

My apologies that I can't comment on BouncyCastle.

Regards,
Christian