United StatesChange Country, Oracle Worldwide Web Sites Communities I am a... I want to...
Bug ID: JDK-4696477 certificates should be downloaded dynamically for https
JDK-4696477 : certificates should be downloaded dynamically for https

Details
Type:
Enhancement
Submit Date:
2002-06-03
Status:
Resolved
Updated Date:
2002-10-15
Project Name:
JDK
Resolved Date:
2002-10-15
Component:
deploy
OS:
linux,generic
Sub-Component:
webstart
CPU:
x86,generic
Priority:
P4
Resolution:
Fixed
Affected Versions:
1.0.1,1.2.0
Fixed Versions:
1.4.2 (mantis)

Related Reports
Duplicate:

Sub Tasks

Description

Name: pa48320			Date: 06/03/2002


I am reporting this againt Java Web Start 1.2. This version is not
yet available at the partner site for bug filing.

If a user wants to use "https" to download jar files and subsequently
use the "https" to connect to the server, he/she has to import
the certificate to the client manually first. Otherwise en exception
would be raised like "certificate is not found in the keystore and
can not be trusted".
If a browser encounters https site and finds the certificate is not
in it's keystore, it imports the certificate and asks the user if it
can be trusted. It will be put in the keystore if the user trusts it.
We want similar kind of dynamically importing certificates in Java
Web Start. Otherwise it is practically very difficult to deploy
our application for large no. of users who want to use https as
the method of communication between the client and the server.
(Review ID: 148160) 
======================================================================

                                    

Comments
EVALUATION

need to implement this for mantis
###@###.### 2002-06-10
                                     
2002-06-10
WORK AROUND



Name: pa48320			Date: 06/03/2002


In order to work with "https" which is supported in 1.2, user has
to manually import the certificate to the client's keystore using
something like
keytool -import -keystore ./cacerts -trustcacerts -file apache_1024.crt
======================================================================
                                     
2004-08-31
CONVERTED DATA

BugTraq+ Release Management Values

COMMIT TO FIX:
mantis

FIXED IN:
mantis

INTEGRATED IN:
mantis
mantis-b04


                                     
2004-08-31



Hardware and Software, Engineered to Work Together