Java Cosign Filter

[John Mitchell <jfm@xxxxxxxxxxx>]

Hi,

I'm reading the following in the Java filter README.

To install jCoSign into an existing web application, perform the following.

- Create an SSL KeyStore:

1. Create a keystore using your JDK or JRE's "keytool" utility.
A description of how to use keytool can be found at
http://java.sun.com/j2se/1.4.2/docs/tooldocs/solaris/keytool.html

2. Place your keystore somewhere that your application server has
access.

It is not clear what the keystore is meant to contain - is it just a 
public / private key pair for the web application - or is it a self 
signed certificate for the web application...in which case if there is a 
"real" certificate available - should this be imported into the above 
keystore? And what about aliases for the keys / certificates - are there 
any specific aliases that are expected by the filter?

Kind Regards

John Mitchell