Re: problem about ssl

2008-12-25 Thread lampa
The specified certificate is entrusted by CA , if not, I think TOMCAT must verify the certificate and SSL connection must be failed . I don't think there is any problem about my idea. I just want to implement something that choosing the certificate by ActiveX control,not by users. Yes, maybe I s

Re: problem about ssl

2008-12-25 Thread Gregor Schneider
Actually your approach is breaking SSL-security. Among other things SSL is bsed on TRUST. Therefore, if an unkown or self-signed certificate is used, any browser should inform the user that the cert is not signed by a CA. If you want to implement a way to circumvent said behaviour, personally I do

Re: problem about ssl

2008-12-25 Thread lampa
I just want to prevent prompt windows to show ,instead that certificate will specified by ActiveX control . I don't know there is any solution to do it . Can you tell me ? Thank you very much! Lampa -- View this message in context: http://www.nabble.com/problem-about-ssl-tp21156802p21166271.ht

Re: problem about ssl

2008-12-24 Thread lampa
Thank you for your reply firstly. I am sorry to I do not describe the problem. I try again: I want to connect to server by SSL connection . In order to check the client identity ,IE will prompt user choose your certificate(client certificate). But, I don't want that user choose the certificate in

Re: problem about ssl

2008-12-24 Thread Mark Thomas
lampa wrote: > Hello all: > Now, I configure the SSL server in TOMCAT ,and I access the > address(https://localhost:8433/...) is OK. > However, before I access the port 8433 ,I must choose the certificate in IE > browser. I don't want to do it,I just want to call the web browser script > ,which ch