0

We need to allow a specific java certificate for our users so that they don't have to accept the invalid certificate popup. Is there any known way of doing this? Is there anyway we can deploy a pre-defined JRE certificate store or anything like that?

Thanks

1
  • I would try this question on SO
    – Ivo Flipse
    Sep 29, 2009 at 7:12

2 Answers 2

3

Managed to find a solution, in <user>\application data\sun\java\deployment\security there's a file called trusted.certs which is the JRE certificate store. You can add and accept the certificates you need and deploy the file to the users through either a GPO or the mandatory profile if you are using mandatory profiles.

0

You need to certify your application using the certificate. This process is called signing, and the java program that does it is jarsigner.exe, explained here. However, this program is part of the java JDK and not the JRE.

Please note that after having signed the jar file, your clients only need the JRE for it to function. You only need install the JDK on the development machine.

For further info see:
Understanding Signing and Verification
Lesson: API and Tools Use for Secure Code and File Exchanges

2
  • you did not read the question properly. We didn't develop the application, nor will they who properly sign it. It does not matter, I managed to find a solution.
    – Jonas B
    Sep 29, 2009 at 8:25
  • Sorry, guess I had answered too many questions by novices the last few days.
    – harrymc
    Sep 29, 2009 at 8:47

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .