Java Security

Hi all,

I am experimenting in encrypting and decrypting emails using smime but unfortunately I'm a bit lost. I have been using thawte to generate some certificates for me to use.

I can decrypt email messages using test public certs from other senders but now I am trying to encrypt and decrypt a message using a key-pair I have generated myself. I generated a certificate signing request and then got an x509 cert from thawte and put it in a jks keystore. It shows up as a PrivateKeyEntry using keytool (process outlined here: http://www.crionics.com/products/opensource/faq/signFree.htm).

The thing is there is only one entry there - shouldn't I have a private key to encrypt it and a public key to distribute to be used to decrypt? I only seem to have the private key here. Where am I going wrong? Do I have to do a seperate process for the public key?

Thanks,

Illu