Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

We need to allow a specific java certificate for our users so that they don't have to accept the invalid certificate popup. Is there any known way of doing this? Is there anyway we can deploy a pre-defined JRE certificate store or anything like that?

Thanks

share|improve this question
    
I would try this question on SO –  Ivo Flipse Sep 29 '09 at 7:12
add comment

2 Answers

Managed to find a solution, in <user>\application data\sun\java\deployment\security there's a file called trusted.certs which is the JRE certificate store. You can add and accept the certificates you need and deploy the file to the users through either a GPO or the mandatory profile if you are using mandatory profiles.

share|improve this answer
add comment

You need to certify your application using the certificate. This process is called signing, and the java program that does it is jarsigner.exe, explained here. However, this program is part of the java JDK and not the JRE.

Please note that after having signed the jar file, your clients only need the JRE for it to function. You only need install the JDK on the development machine.

For further info see:
Understanding Signing and Verification
Lesson: API and Tools Use for Secure Code and File Exchanges

share|improve this answer
    
you did not read the question properly. We didn't develop the application, nor will they who properly sign it. It does not matter, I managed to find a solution. –  Jonas B Sep 29 '09 at 8:25
    
Sorry, guess I had answered too many questions by novices the last few days. –  harrymc Sep 29 '09 at 8:47
    
No problem, thanks for the effort anyway :) –  Jonas B Sep 29 '09 at 9:34
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.