Generate digital keys/certificates programmatically

[Vimal]

I need to manage (create, store and import/export) the digital
Certificates in a web based application.
I know that Sun's keytool can be used to create digital certificates
X.509. But it is command line tool.
Is there any way we can use keytool to create certificates
programmatically using some API (except Runtime.exec())?
Also, there is an open source which allows certificate generation,
BouncyCastle (http://www.bouncycastle.org). Any experience with
BouncyCastle?
I also need to store certificates. I can use KeyStore. Any other
options are available?

Thanks in advance for your help and ideas,
Vimal Gupta

[Christian Schlichtherle]

Hi there,

unfortunately, there is no public API for the keytool which would allow you
to create a certificate.

In case you don't specifically need to generate X.509 certificates, but just
a digitally signed object, please consider the TrueLicense package at
http://truelicense.dev.java.net. The classes
de.schlichtherle.xml.GenericCertificate and
de.schlichtherle.license.LicenseNotary would solve your problem then.

My apologies that I can't comment on BouncyCastle.

Regards,
Christian