简体繁体 English

Java Applet和SSL /证书

[英]Java Applet & SSL/Certificate

原文 2010-12-23 22:33:40 8 1 java/ ssl/ applet/ certificate

My website uses SSL and takes them directly to a Java applet after login. 我的网站使用SSL，并在登录后将其直接带到Java applet。 The applet yields a warning screen proclaiming that the website's certificate can't be verified. 该小程序会显示一个警告屏幕，声明无法验证该网站的证书。 After clicking "Yes" to continue anyway, a second pop up appears with: 单击“是”继续进行操作后，第二个弹出窗口显示：

Identification required. 需要身份证明。 Please select certificate to be used for authentication. 请选择用于认证的证书。

Underneath that message, there is a white box that I assume is supposed to list certificate options. 在该消息下方，有一个白框，我认为该白框应列出证书选项。 Mine doesn't have any options, so I am forced to click "OK" and the applet doesn't load. 我的没有任何选择，因此我被迫单击“确定”，并且小程序未加载。

The certificates for the website are installed on the browser. 该网站的证书已安装在浏览器中。 I also installed them by right-clicking on the Java icon within the Windows task bar, clicking "Open Control Panel" and installing them through the Security options. 我还通过右键单击Windows任务栏中的Java图标，单击“打开控制面板”并通过“安全性”选项进行安装来安装它们。

Nothing seems to work. 似乎没有任何作用。 Does anyone have any ideas? 有人有什么想法吗？

1 个解决方案

You have your Tomcat or whatever configured to request or require SSL client certificates. 您已将Tomcat或配置为请求或要求SSL客户端证书的任何内容。 The effect at the client is the same for both: an incoming CertificateRequest. 两者在客户端的效果是相同的：传入的CertificateRequest。 So it pops up the 2nd dialog. 因此，它弹出第二个对话框。 If you cancel and it is 'request' not 'require', the applet should load. 如果取消，并且是“请求”而不是“需要”，则应加载小程序。

I have had numerous problems with applets and HTTPS recently, including what look like Java plugin bugs, and have concluded that the answer is really to load them via HTTP in plaintext. 最近，我在applet和HTTPS上遇到了许多问题，包括看起来像Java插件的bug，并得出结论，答案是要通过纯文本通过HTTP加载它们。

The first dialog should be fixed by not using a self-signed SSL certificate. 应该不使用自签名SSL证书来修复第一个对话框。