views:

487

answers:

2

I'm new to java and I have a problem very similar to this.. suppress a digital certificate when prompted. I have full control over the environment. Any possible solutions? Expert Exchange question

A: 

I don't believe that you can, it's built into Windows. That's one of their built-in mechanisms to prevent infections, etc. That's also why I suspect you can't find the answer.

My question is why wouldn't you want to acquire the certificate? I don't remember the actual costs, but I believe it's somewhere between a hundred and a few hundred to acquire the certificate. Definitely a LOT less than the costs of trying to figure out how to suppress it in the first place...

Stephane Grenier
Even signed code (as this appears to be) will require confirmation before running.
erickson
Stephane, I didn't get you. "why wouldn't you want to acquire the certificate" Can you explain little more? I think we can shell out few hundred bucks if we can suppress this.
Broken Link
A: 

Hopefully there is no way to suppress the warning, because that would be security bug. If there is such a way, it should be reported and fixed.


I'm sorry; I misunderstood the original question, but some of the OP's additional comments have made it clearer. The administrator of the machines in question can automate the setup of a key store with the necessary certificates in it.

See the security information in the Java Deployment Guide. Create a key store that contains the certificate used by the developer to sign the application. This will be the "Trusted Certificates" key store, and its location is specified by the "deployment.system.security.trusted.certs" property in the deployment properties file (it probably makes most sense to specify this at the system level, rather than the user).

The location of the system properties is specified in the deployment.config file, and the location can be a URL so that all workstations point to an enterprise-wide configuration.

erickson
yeah, I was trying to look at the same thing. The easiest way I thought was to install the certificate using keytool.exe. Make a batch file and push it in network along with ton of other applications we install in our systems.
Broken Link
And Thanks for shedding some light.
Broken Link