Signed applet in Intranet site
Hi
I have an applet which i want to make a signed applet,
has anyone created an internal certificate and use it with the applet,
are there any disadvantages for doing so, rather then getting a certificate from verisign or some third party company.
is there any expiration date for my generated certificate.
Ashish
# 1
Hi
I have an applet which i want to make a signed applet,
has anyone created an internal certificate and use it with the applet,
are there any disadvantages for doing so, rather then getting a certificate from verisign or some third party company.
is there any expiration date for my generated certificate.
Ashish
1. A public certificate is better for it usually executes the applet/application without prompting the user (who might chose "No" if asked, including by mistake). So a public/third party certificate from a well known source is better than the one you can create using the jarsigner tool. If you have time and money go and use a public certificate, otherwise create your own.
2. It does have an expiration date, usually 6 months or so.
# 2
> Hi
> I have an applet which i want to make a signed
> applet,
> has anyone created an internal certificate and use it
> with the applet,
> are there any disadvantages for doing so, rather then
> getting a certificate from verisign or some third
> party company.
> is there any expiration date for my generated
> certificate.
>
> Ashish
>
> 1. A public certificate is better for it usually
> executes the applet/application without prompting the
> user (who might chose "No" if asked, including by
> mistake). So a public/third party certificate from a
> well known source is better than the one you can
> create using the jarsigner tool. If you have time and
> money go and use a public certificate, otherwise
> create your own.
> 2. It does have an expiration date, usually 6 months
> or so.
I am looking to do the same thing as Ashish. I've tested my signed applet, which I created using keytool/jarsigner. Now I would like to eliminate any security-related interaction on the part of my users. So my 2 questions are...
1) If I go the route of obtaining a certificate from a trusted authority, are you saying I can avoid the initial "Do you trust the publisher of this applet" popup?
2) What does happens when my certificate expires? Is there a difference with a public vs. non-public certificate?
Thanks,
-Bill