# Re: JSECURITY Issue: Certificates

Jan Luehe (luehe@laguna.eng.sun.com)
Thu, 8 Oct 1998 11:42:36 -0700 (PDT)

- Messages sorted by: [ date ][ thread ][ subject ][ author ]
- Next message: Jan Luehe: "Re: broken link"
- Previous message: Kevin Goode: "test"
- Maybe in reply to: Nathan X Sowatskey: "JSECURITY Issue: Certificates"

Martin:

> I don't understand why browsers (Netscape, MSInternetExpl., etc.) are not up
to date with your "javakey" made certificates...
>
> I made a SIGNED applet that accesses multiple IP addresses and it works just
great in your appletviewer! I try to load the applet in Netscape 4.06...
SECURITY VIOLATION!!!
>
> I finally found a text on the Netscape site stating that javakey made
certificates are not compatible with theirs!!!

The certificate format used by "javakey" is compatible with
the format used by Netscape/IE. The only difference is
that "javakey" produces "DSA" certificates, i.e., certificates
that contain a "DSA" public key and are signed using the
"SHA1/DSA" signature algorithm. Those algorithms currently
are not supported by the browsers you mentioned.

In order to be able to use the "javakey"-generated certificates with
your signed applets, you have to use the Java Plug-in. See
http://java.sun.com/security/signExample/
for more information.

Jan

- Next message: Jan Luehe: "Re: broken link"
- Previous message: Kevin Goode: "test"
- Maybe in reply to: Nathan X Sowatskey: "JSECURITY Issue: Certificates"