Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsWhite Papers
Discussion GroupsFirst AidDatabasesJavaBeansGUIJava 3DVirtual MachineCORBASecurityToolsGeneral
Java DirectoryOpen Source ProjectsSample Book ChaptersUser GroupsWeb Resources
Related Topics
Databases.NETMore Topics ...

Java Forum / Security / December 2004

Tip: Looking for answers? Try searching our database.

Web start & client certificates

Thread view: 
Lloyd Shove - 19 Nov 2004 11:56 GMT
Hi all,

I'm attempting to use web start to launch a thick client java app.
the app requires the clients authenticate themselves with
certificates.  Everything worked fine when the certs were kept in the
browser and the app ran as an applet however things aren't so nice on
JDK 1.5 and web start.

Web start lists the client certificates on launch (that it has
imported from IE) and lets the user select the one they want to use.
However it makes the user select more than once (4 times for some
reason!) before failing with "SSLHandshakeException: Error signing
certificate verify".

I assumed webstart would be able to handle this as it found the
certificates afterall but it appears not to.  Anyone got an idea what
this error means, what I could be doing wrong or workarounds to try?

Thanks in advance
Lloyd
eps - 16 Dec 2004 02:49 GMT
Hi.  I am having a similar problem.  I've got client authentication set up
through JWS, and everything seems to be working fine, except for the fact
that JWS prompts for a client certificate once for each resource in the
jnlp file.  Has anyone made any progress in this area?  Is there some
setting to allow JWS to cache the first certificate that is selected the
way the browser does?


Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.