小程序和客户端证书认证
我有一个小程序，它使用 SSL + 客户端证书身份验证从服务器加载其 jar 依赖项。
加载小程序的网页已使用客户端证书进行身份验证。
但是，当小程序启动时，JVM 进程（与浏览器分开）会弹出一个证书选择对话框。事实证明，这些证书是从 java 客户端证书密钥库读取的：
%USERPROFILE%\Application 数据\Sun\Java\Deployment\security\trusted.clientcerts (Windows XP/2000)
%USERPROFILE%\AppData\LocalLow\Sun\Java\Deployment\security\trusted.clientcerts (Windows 7)
我想避免强迫用户将他/她的证书导入此密钥库。相反，我想让 JVM 在 Firefox 的证书密钥库中搜索证书。
这可行吗？真实世界的例子将受到高度赞赏！
I have an applet that loads its jar dependencies from a server using SSL + client certificate authentication.
The web page that loads the applet is already authenticated using a client certificate.
However, when the applet starts up, the JVM process (separate from the browser) brings up a dialog for certificate selection. These certificates, as it turns out, are read from the java client cert keystore:
%USERPROFILE%\Application
Data\Sun\Java\Deployment\security\trusted.clientcerts
(Windows XP/2000)%USERPROFILE%\AppData\LocalLow\Sun\Java\Deployment\security\trusted.clientcerts
(Windows 7)
I want to avoid forcing the user to import his/her certificate into this keystore. Instead, I want to make the JVM search for the certificate in the Firefox's certificate keystore.
Is this doable? Real-world examples would be highly appreciated!
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论