sbi@am:~/projects/testcases/simple/server2$ java -classpath ../../uast/p2j/build/lib/p2j.jar com.goldencode.p2j.security.SSLCertGenUtil directory.xml
Initializing service for directory directory.xml...
Reading company configuration...
Using 'US' for [C] Country Code.
Using 'Atlanta' for [L] Locality (city, etc).
Using 'Golden Code Development Corporation' for [O] Organization.
Using 'Information Technology' for [OU] Organization Unit.
Using 'Georgia' for [ST] State or Province Name.
Using 10 years for validity.
Enter RSA key strength (in bits), greater or equal than 2048 (blank for default 2048): 
Enter RSA public exponent, blank for default (65337): 
Adding account /security/accounts/processes/standard
Adding account /security/accounts/processes/broker1_process
Adding account /security/accounts/users/bogus
Account /security/accounts/users/admin ignored - no alias is defined
Account /security/accounts/users/yqo8su574us3z676 ignored - no alias is defined
Account /security/accounts/users/h7y287c5yp5pc8r7 ignored - no alias is defined
Account /security/accounts/users/31k46f97zr0ztwd6 ignored - no alias is defined
Account /security/accounts/users/8bw98ap5y85c7qt1 ignored - no alias is defined
Account /security/accounts/users/t02360s7gkd7lwg7 ignored - no alias is defined
Account /security/accounts/users/h0z7q14zz98wxj17 ignored - no alias is defined
Account /security/accounts/users/vi0y3axn5s9239a2 ignored - no alias is defined
Account /security/accounts/users/3m6u73sr98dq4qc6 ignored - no alias is defined
Re-use the encryption passwords currently in the directory (yes/no): no
Re-use the root CA currently in the directory (yes/no): no
Generating root CA using [p2j-root] alias...
Generating certificate for account with alias [broker1]...
Generating certificate for account with alias [shared]...
Generating certificate for server with alias [standard]...
Encrypt the in-directory private keys using the same password (yes/no): yes
Private key for root CA [p2j-root] was encrypted using the [~Kl4OAY4UTBKAbFh&_A6B6vEoY041R9!] password and the password was NOT SAVED in the directory.  Losing this password will prohibit using the root CA to issue new certificates.
Adding certificate for alias [p2j-root] to the /security/certificates/cas/p2j-root node...
Private key for alias [broker1] was encrypted using the [5xYW$9>9@bvgiD9Fh)nWi1XWgMDE939Q] password and saved in the /security/certificates/private-keys/broker1 node.
Use the access:password:keyentry-broker1 key to set this password in the server's bootstrap config file and delete  the /security/certificates/private-keys/broker1 node from the directory.
Private key for alias [shared] was encrypted using the [5xYW$9>9@bvgiD9Fh)nWi1XWgMDE939Q] password and saved in the /security/certificates/private-keys/shared node.
Use the access:password:keyentry-shared key to set this password in the server's bootstrap config file and delete  the /security/certificates/private-keys/shared node from the directory.
Private key for alias [standard] was encrypted using the [5xYW$9>9@bvgiD9Fh)nWi1XWgMDE939Q] password and saved in the /security/certificates/private-keys/standard node.
Use the access:password:keyentry-standard key to set this password in the server's bootstrap config file and delete  the /security/certificates/private-keys/standard node from the directory.
Adding certificate for alias [broker1] to the /security/certificates/peers/broker1 node...
Adding certificate for alias [shared] to the /security/certificates/peers/shared node...
Adding certificate for alias [standard] to the /security/certificates/peers/standard node...
Save the account private keys in external key-store(s) (yes/no): yes
Save the private keys in the same key store (yes/no): no
The private key for certificate [broker1] was saved in the [broker1-private-key.store] key store, using store password [XL57uunOAod4(7xniwAg6e`1a0Su~)g8DRmX] and key-entry password [g8j4=mxVd*063QskHNuRfPJ6swd_2<JEgQX6].
The private key for certificate [shared] was saved in the [shared-private-key.store] key store, using store password [P40txe8HZexWxH4x%P6X8o7KPk&u4tCPM_P>] and key-entry password [kW9MNr8S<)j-8xWeq8ZTzl5t-QKJ7B2Yh1nI].
Save the server private keys in external key-store(s) (yes/no): yes
Save the private keys in the same key store (yes/no): no
The private key for certificate [standard] was saved in the [standard-private-key.store] key store, using store password [&QF4g&TSaA6AHBAo1dMw7%rEvI7=332dsGJE] and key-entry password [5seEse61i7HI1P3?pSAQHDaU4=2XaY`LbW^s].
Save servers' certificates in an external key store (yes/no): yes
Include the root CA certificate, to use this store as a trust store (yes/no)? yes
Enter key store file name: srv-certs.store
The servers' certificates [standard] were saved in the [srv-certs.store] key store, using password [d61pi96tP8MS!T^87Efcjyl1QtPs_EgvIKZ!].
Save the root CA private key in an external key store (yes/no): yes
Enter key store file name: root-ca-key.store
The root CA's private key and certificate were saved in the [root-ca-key.store] store.
The key store was encrypted using the [75EkRBMEb4OC%0oHG-lAoEV37g4Yq))AqD0k] password, while the root CA's private key was encrypted using the [2&1XgqEw7~ezokkT*fz8aDM7vTIk3FwX#8r0] password.
Done.
WARNING! Any configuration set at the client.xml or server.xml files or via bootstrap config arguments will have priority over the in-directory keys or certificates.
WARNING! The private key encryption passwords for all the account certificates are saved unencrypted in the directory.  The root CA's private key can be safely deleted, if it is not required to issue other certificates using this CA.
WARNING! All private keys are encrypted using the same [5xYW$9>9@bvgiD9Fh)nWi1XWgMDE939Q] password. If needed, delete the 'key-password' nodes from the directory manually, and set this password using the access:password:masterkeyentry bootstrap config at server startup.

