sbi@am:~/projects/testcases/simple/server$ java -classpath ../../uast/p2j/build/lib/p2j.jar com.goldencode.p2j.security.SSLCertGenUtil ./directory.xml
Initializing service for directory ./directory.xml...
Reading company configuration...
Organization Unit [OU]: Information Technology
Using 'Information Technology' for [OU] Organization Unit.
Organization [O]: GCD
Using 'GCD' for [O] Organization.
Locality (city, etc) [L]: Alpharetta
Using 'Alpharetta' for [L] Locality (city, etc).
State or Province Name [ST]: Georgia
Using 'Georgia' for [ST] State or Province Name.
Country Code [C]: US
Using 'US' for [C] Country Code.
Enter validity (years): 10
Using 10 years for validity.
Enter RSA key strength (in bytes), blank for default (1024): 2048
Using 2048 bytes for RSA private key strength.
Enter RSA public exponent, blank for default (65337): 65337
Using 65337 bytes for RSA public exponent.
Adding account /security/accounts/processes/standard
Adding account /security/accounts/users/bogus
WARNING: alias shared is set for multiple accounts!
Account /security/accounts/users/skkk8732h1x6d65q ignored - no alias is defined
Account /security/accounts/users/2efu2c0m1k883xv5 ignored - no alias is defined
Account /security/accounts/users/7is6stk633lml420 ignored - no alias is defined
Account /security/accounts/users/b97vvzkz5h651l52 ignored - no alias is defined
Account /security/accounts/users/03x90er9aj8k7a5e ignored - no alias is defined
Account /security/accounts/users/0vcf80l5i753m9nq ignored - no alias is defined
Account /security/accounts/users/zie76w25q1t08sp6 ignored - no alias is defined
Account /security/accounts/users/h5276ng48y50qsqf ignored - no alias is defined
Enter the root CA alias: p2j-root
Generating root CA using [p2j-root] alias...
Generating certificate for account with alias [shared]...
Generating certificate for server with alias [standard]...
Encrypt the in-directory private keys using the same password (yes/no): yes
Private key for root CA [p2j-root] was encrypted using the [5oltvv62@@At9PXc=3Ok4UTV!to3L6yU] password and the password was NOT SAVED in the directory.  Losing this password will prohibit using the root CA to issue new certificates.
Adding certificate for alias [p2j-root] to the /security/certificates/cas/p2j-root node...
Private key for alias [shared] was encrypted using the [(%x2osonB0jZr6T_2Tvu=1gy2bfy2AH7] password and saved in the /security/certificates/private-keys/shared node.
Use the access:password:keyentry-shared key to set this password in the server's bootstrap config file and delete  the /security/certificates/private-keys/shared node from the directory.
Private key for alias [standard] was encrypted using the [(%x2osonB0jZr6T_2Tvu=1gy2bfy2AH7] password and saved in the /security/certificates/private-keys/standard node.
Use the access:password:keyentry-standard key to set this password in the server's bootstrap config file and delete  the /security/certificates/private-keys/standard node from the directory.
Adding certificate for alias [shared] to the /security/certificates/peers/shared node...
Adding certificate for alias [standard] to the /security/certificates/peers/standard node...
Save the account private keys in external key-store(s) (yes/no): yes
Save the account private keys in the same key store (yes/no): yes
Enter key store file name: trust-store.store
Adding the private key for certificate [shared] to store [trust-store.store], using key-entry password [aSl1+DyxVtL*2foVQe`i%iaY834MqHSX592v]...
The key store [trust-store.store] was encrypted using password [4bNv-RDgOdZG$@Ae`d98gdgF66dF7vtJ2ct6].
Save servers' certificates in an external key store (yes/no): yes
Include the root CA certificate, to use this store as a trust store (yes/no)? yes
Enter key store file name: root-key.store
The servers' certificates [standard] were saved in the [root-key.store] key store, using password [~ZC8SUWs>iaGPL4%3ACV73X4ju3pYN3faOW(].
Save the root CA private key in an external key store (yes/no): yes
Enter key store file name: 
Enter key store file name: 
Enter key store file name: root-trust.store
The root CA's private key and certificate were saved in the [root-trust.store] store.
The key store was encrypted using the [VD67uADcUO=E7tR5myW@t3P?7o5Nt@DGZns8] password, while the root CA's private key was encrypted using the [ACz3yR4`g=cz@dlFTR0dfCAU7ie74hF1s5=M] password.
Done.
WARNING! Any configuration set at the client.xml or server.xml files or via bootstrap config arguments will have priority over the in-directory keys or certificates.
WARNING! The private key encryption passwords for all the account certificates are saved unencrypted in the directory.  The root CA's private key can be safely deleted, if it is not required to issue other certificates using this CA.
WARNING! All private keys are encrypted using the same [(%x2osonB0jZr6T_2Tvu=1gy2bfy2AH7] password. If needed, delete the 'key-password' nodes from the directory manually, and set this password using the access:password:masterkeyentry bootstrap config at server startup.