Signed applet in Intranet site

Hi

I have an applet which i want to make a signed applet,

has anyone created an internal certificate and use it with the applet,

are there any disadvantages for doing so, rather then getting a certificate from verisign or some third party company.

is there any expiration date for my generated certificate.

Ashish

[352 byte] By [kulkarni_asha] at [2007-11-27 6:10:57]
# 1

Hi

I have an applet which i want to make a signed applet,

has anyone created an internal certificate and use it with the applet,

are there any disadvantages for doing so, rather then getting a certificate from verisign or some third party company.

is there any expiration date for my generated certificate.

Ashish

1. A public certificate is better for it usually executes the applet/application without prompting the user (who might chose "No" if asked, including by mistake). So a public/third party certificate from a well known source is better than the one you can create using the jarsigner tool. If you have time and money go and use a public certificate, otherwise create your own.

2. It does have an expiration date, usually 6 months or so.

xlinuksa at 2007-7-12 17:16:51 > top of Java-index,Security,Signed Applets...
# 2

> Hi

> I have an applet which i want to make a signed

> applet,

> has anyone created an internal certificate and use it

> with the applet,

> are there any disadvantages for doing so, rather then

> getting a certificate from verisign or some third

> party company.

> is there any expiration date for my generated

> certificate.

>

> Ashish

>

> 1. A public certificate is better for it usually

> executes the applet/application without prompting the

> user (who might chose "No" if asked, including by

> mistake). So a public/third party certificate from a

> well known source is better than the one you can

> create using the jarsigner tool. If you have time and

> money go and use a public certificate, otherwise

> create your own.

> 2. It does have an expiration date, usually 6 months

> or so.

I am looking to do the same thing as Ashish. I've tested my signed applet, which I created using keytool/jarsigner. Now I would like to eliminate any security-related interaction on the part of my users. So my 2 questions are...

1) If I go the route of obtaining a certificate from a trusted authority, are you saying I can avoid the initial "Do you trust the publisher of this applet" popup?

2) What does happens when my certificate expires? Is there a difference with a public vs. non-public certificate?

Thanks,

-Bill

wskeltona at 2007-7-12 17:16:51 > top of Java-index,Security,Signed Applets...