Is it possible to generate a certificate signing request using Java code without using sun.* or com.sun.* packages, and without using an external library? If I need to use a library like BouncyCastle I will look into it, but all my searching so far only shows examples which use sun packages or BouncyCastle and I'd prefer to stick to the raw API if possible.
And, what's the best approach to doing this if what I'm trying is not possible?
I don't think this is possible. Accepting this until someone has a better answer or it becomes possible.
FWIW, I ended up using the shell to call keytool to do this.