Java Solaris Communities Sun Store Join SDN My Profile Why Join?
 
Bug Database
Bug Detail
Quick Lists
Top 25 Bugs
Top 25 RFE's
Recently Closed Bugs
Printable Page Printable Page


Bug Database
Bug ID: 4696477
Votes 15
Synopsis certificates should be downloaded dynamically for https
Category javawebstart:general
Reported Against 1.2 , 1.0.1
Release Fixed 1.4.2(mantis)
State 10-Fix Delivered, request for enhancement
Priority: 4-Low
Related Bugs 4838056
Submit Date 03-JUN-2002
Description




I am reporting this againt Java Web Start 1.2. This version is not
yet available at the partner site for bug filing.

If a user wants to use "https" to download jar files and subsequently
use the "https" to connect to the server, he/she has to import
the certificate to the client manually first. Otherwise en exception
would be raised like "certificate is not found in the keystore and
can not be trusted".
If a browser encounters https site and finds the certificate is not
in it's keystore, it imports the certificate and asks the user if it
can be trusted. It will be put in the keystore if the user trusts it.
We want similar kind of dynamically importing certificates in Java
Web Start. Otherwise it is practically very difficult to deploy
our application for large no. of users who want to use https as
the method of communication between the client and the server.
(Review ID: 148160) 
======================================================================
Work Around




In order to work with "https" which is supported in 1.2, user has
to manually import the certificate to the client's keystore using
something like
keytool -import -keystore ./cacerts -trustcacerts -file apache_1024.crt
======================================================================
Evaluation
need to implement this for mantis
 xxxxx@xxxxx  2002-06-10
Comments
  
  Include a link with my name & email   

Submitted On 15-SEP-2004
zhengqiang@banruo.net
dsadas@dasad 2002-06-10


Submitted On 15-SEP-2004
zhengqiang@banruo.net
zhengqiang@banruo.net


Submitted On 15-SEP-2004
zhengqiang@banruo.net
fsdfdsfsd


Submitted On 29-AUG-2006
rbuitragoc
I want to know if the implementation made to fix this bug in Mantis (1.4.2) implies that when handling SSL the expiration date of a given certificate will notbe checked any longer? 



PLEASE NOTE: JDK6 is formerly known as Project Mustang