|
Quick Lists
|
|
Bug ID:
|
4696477
|
|
Votes
|
15
|
|
Synopsis
|
certificates should be downloaded dynamically for https
|
|
Category
|
javawebstart:general
|
|
Reported Against
|
1.2
, 1.0.1
|
|
Release Fixed
|
1.4.2(mantis)
|
|
State
|
10-Fix Delivered,
request for enhancement
|
|
Priority:
|
4-Low
|
|
Related Bugs
|
4838056
|
|
Submit Date
|
03-JUN-2002
|
|
Description
|
I am reporting this againt Java Web Start 1.2. This version is not
yet available at the partner site for bug filing.
If a user wants to use "https" to download jar files and subsequently
use the "https" to connect to the server, he/she has to import
the certificate to the client manually first. Otherwise en exception
would be raised like "certificate is not found in the keystore and
can not be trusted".
If a browser encounters https site and finds the certificate is not
in it's keystore, it imports the certificate and asks the user if it
can be trusted. It will be put in the keystore if the user trusts it.
We want similar kind of dynamically importing certificates in Java
Web Start. Otherwise it is practically very difficult to deploy
our application for large no. of users who want to use https as
the method of communication between the client and the server.
(Review ID: 148160)
======================================================================
|
|
Work Around
|
In order to work with "https" which is supported in 1.2, user has
to manually import the certificate to the client's keystore using
something like
keytool -import -keystore ./cacerts -trustcacerts -file apache_1024.crt
======================================================================
|
|
Evaluation
|
need to implement this for mantis
xxxxx@xxxxx 2002-06-10
|
|
Comments
|
Submitted On 15-SEP-2004
zhengqiang@banruo.net
dsadas@dasad 2002-06-10
Submitted On 15-SEP-2004
zhengqiang@banruo.net
zhengqiang@banruo.net
Submitted On 15-SEP-2004
zhengqiang@banruo.net
fsdfdsfsd
Submitted On 29-AUG-2006
rbuitragoc
I want to know if the implementation made to fix this bug in Mantis (1.4.2) implies that when handling SSL the expiration date of a given certificate will notbe checked any longer?
PLEASE NOTE: JDK6 is formerly known as Project Mustang
|
|
|
 |