使用带有客户端身份验证的 Java Webstart 时如何抑制密钥库密码提示? [英] How to suppress the keystore password prompt when using Java Webstart with client auth?

问题描述

在使用客户端身份验证的 https 服务器中使用 Java Webstart 时，有没有办法抑制密码提示?我想这样做，因为 webstarted 应用程序在没有键盘的触摸屏设备上运行，并以 kiosk 模式运行.因此，从密钥库中删除密码或将其存储在某处就足够了，可能是在启动应用程序的桌面快捷方式中.

Is there a way to suppress the password prompt when using Java Webstart with a https server that uses client authentication? I would like to do this, because the webstarted app runs on a touch screen device that got no keyboard and runs in a kiosk mode. Therefore it would be sufficient to either remove the password from the keystore or to store it somewhere, maybe in the desktop shortcut that starts the app.

我已经尝试将 JVM 参数附加到这样的快捷方式，但它不起作用:

I already tried to attach a JVM Parameter to the shortcut like this, but it doesn't work:

javaws -J-Djavax.net.ssl.keyStorePassword=mypass https://...

我还发现，当我在 Java 控制面板中激活使用浏览器密钥库"选项并将证书添加到其中时，我可以取消密码提示并仍然成功连接.似乎只有 Java-Keystore 需要密码，而 Internet-Explorer 不需要.

I also found out, when I activate the "use browser keystore"-option in the Java Control Panel and add the certificate to it, I can cancel the password prompt and still connect successfully. It seems like only the Java-Keystore asks for a password and Internet-Explorer's doesn't.

推荐答案

您尝试使用自定义 KeystoreProvider 实现.创建并不难，我假设您可以覆盖对密码的需求.您需要自定义用于启动 webstart 应用程序的 JRE 的 security.properties.

You try to use a custom KeystoreProvider implementation. It is not that hard to create and I assume that you could override the need for the password. You will need to customize the security.properties of the JRE that is used to launch the webstart application.

尽管在您的情况下......您是否有理由不想使用浏览器密钥库?在这种情况下，您没有问题.

Although in your case ... is there a reason why you don't want to use the browser keystore ? In that case you don't have a problem.

大卫

这篇关于使用带有客户端身份验证的 Java Webstart 时如何抑制密钥库密码提示?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！