Access certificates installed in browser

Hi!,
Does anybody know a way to access the certificates installed in client's browser from an applet?.
I've found an applet that works with IE+JNI, so it should be possible, but I need it for Mozilla too. It could be diferent implementations, that isn't so important.
Have anyone done it?.

Mozilla have its own crypto API and provider. For more details look at http://www.mozilla.org/projects/security/pki/jss/
In order to use such API in an applet you will have to sign your applet to gain required sequrity privilegies.

Similar Messages

  • How to install a browser certificate OTA

    Does anybody know if it's possible to install a browser certificate (for authentication) OTA?
    I know that if the certificate is installed in the internet explorer, we can use the desktop manager to synchronize certificates with the device. But unfortunately most of our users do not have the desktop manager installed.
    First I was thinking about policies to push the certificate onto the device, but our BB admin told me that you can
    not define policies per user (one certificate per user).
    I would be nice if it were possible to send the user a http link (email), so that he can fire up the browser and download the certificate. Just like in ie or firefox.
    Any ideas?
    BR
    Predrag
    Solved!
    Go to Solution.

    http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB13492&sliceId=SAL_Public&dialogID=77551987&stateId=0%200%2077553914

  • A site is telling me that i have no digital certificate installed....

    Hi. Trying to access a page on the Spanish version of the IRS, to file a tax document here. I can't get access to the page (or any of their secure pages), and I get this message, which has been Google translated:
    ''The error "403 byrule" is a mistaken identity. Occurs when you try to access an option that requires electronic certificate and the browser does not detect that one is installed or not properly selected. If the choice of the certificate you get a page that says "page can not be displayed" or similar error is possible that the certificate is damaged, changes or problems in the operating system or other causes. If possible, you should try to reinstall a valid copy of your certificate.
    This error in Firefox indicates that there is no digital certificate installed. Go to "Tools" "Options" ("Firefox", "Preferences" Mac "Edit" "Preferences" in Linux), "Advanced" and select the "Encryption". Click on the "View Certificates" and verify that your certificate is installed correctly. If no certificate on the tab "Your Certificates" will have to import a valid copy of the browser. If necessary, also refer to the instructions on importing certificates from our "Help" and the links that we propose below. Once the certificate is installed also make sure that Mozilla Firefox is configured correctly. This may refer to the "Installation, configuration and management of electronic certificates for Mozilla Firefox.''
    Under "view certificates" in preferences/encryption, "Your Certificates" is blank. And I don't see anything in "Authorities" that seems to relate to this website. In 'Servers" there were some exceptions I created (reluctantly) when the site asked for it. I deleted them, still not working."
    I've tried with both "Select one automatically" and "Ask me every time"
    Click on the page below, click on any of the links with a lock to see the resulting error.
    Thanks in advance.

    Thanks. You are very much on the right track, and I can't thank you enough. The page you sent me to is has the right link. But I can't just download the certificate, as you proposed. It's actually part of a significant security system. I went to the webpage that accompanied the link. I have to fill out a form, from that get a code... then go to a local gov't office, show my ID, get another code, then come back, input that, and get my personalized certificate. I'll let you know how it goes. But without you I have no idea how I'd even have gotten onto the right path. Thanks again.

  • Problem accessing mail via Safari browser

    How do I access iCloud Mail via my Safari browser on my iPhone? If I go to iCloud.com it just offers me the option to install it on my phone.
    The problem is, I already have it installed on my phone and it works fine EXCEPT at my new job - the wifi is not very good and I can access internet/Facebook etc but every time I try and load email it always says it 'cannot find the server .' I therefore tried to access email via safari browser - my other email provider works fine that waybut iCloud doesn't even give me the option to login, just keeps suggesting I install it.
    Any ideas how I can check iCloud email at work? Can't do it on work computers, site is blocked....and there is no 3G/4G signal.
    Thanks for any advice!

    According to http://support.apple.com/kb/PH2618 you should be able to access it via a browser by going to https://www.icloud.com/#mail

  • Get certificate from the browser

    Hi friends!,
    I am working with an application to get files from the client machine, to sign those files with the client's certificate and send those sign to the server.
    The application get the client's certificate from a key store, but I want the applet will get the certificate from the browser.
    Is that possible?.
    Thanks and sorry for my little english. Greetings from Venezuela.

    If all you're looking for is Client SSL Authentication, then you don't need to access the digital certificates through an applet; just enable ClientAuth on your web-server and let the browser handle it for you. While I haven't tried this with Chrome, Safari or Opera, I know for a fact that this works on Firefox and IE.
    If you're trying to access the digital certificates/keys in the browser-keystore for digitally signing some content that the applet creates, you're going to have far more difficulty. About 10-12 years ago, Netscape provided an API that allowed you to digitally sign text-content through JavaScript. That died a quiet death, I think, since I don't know of anyone who used that capability (outside of test environments).
    Years later, Mozilla added the ability to digitally sign XML content using XForms; there is even an add-on for Thunderbird (which uses the same libraries as Firefox for PKCS work): https://addons.mozilla.org/en-US/thunderbird/addon/4522/.
    However, to the best of my knowledge, the only way you can get an applet to access the borwser's keystore today is to have the security policy on the client-machine modified to provide access to the local file-system, and the applet then pretty much deals with the keystore and its objects through JCE.
    But, if I'm reading your post correctly, I think all you're looking for is SSL ClientAuth, for which you don't need to do anything other than enable it on your web-server that hosts the applets, and let the browser do the heavy lifting.
    Arshad Noor
    StrongAuth, Inc.

  • Error in trying to access my FORM via browser

    Hi, I am new to Oracle Application Development, as a starter I created a sample form in Form builder and compiled it, let say TESTFORM.fmx
    I have placed this file in [ C:\DevSuiteHome_1\forms ] as my default location in "default.env" file is this only.
    Then I created a tag in "formsweb.cfg" as:
    #ETA Report
    [TESTFORM]
    envfile=default.env
    form=TESTFORM.fmx
    userid=i-----r/i----r@xii
    widith=1500
    height=600
    imagebase=codbase
    archive_jini=frmall_jinit.jar,colorpicker.jar,keyfilter.jar,my_icons.jar
    archive=frmall.jar
    When I try to access it via my browser [IE6] by going to link: http://pptaw0054.lotte-ppta.com:8889/forms/frmservlet?config=TESTFORM
    A grey box of 1500x600 is shown with an error shown in the center: java.lang.ClassNotFoundException: oracle.forms.engine.Main_
    Can anyone please help me out with the problem.
    Thankyou!

    Hi Check these -
    1. Check these URL's are working
    http://pptaw0054.lotte-ppta.com:8889/forms/frmservlet
    http://pptaw0054.lotte-ppta.com:8889/forms/lservlet
    2.If Webutil installed? Then do proper configuration for "WebutilArchive"
    WebutilArchive=frmwebutil.jar,jacob.jar
    3.If Jinitiator is used,check if all corresponding jar files are downloaded onto user machine.Because all required class as shown in the error are there in jinitiator jar files.Also check all jar files that you have mentioned in archive_jinit are downloaded onto user machine.
    DO like this if using webutil archive_jini=frmall_jinit.jar,colorpicker.jar,keyfilter.jar,my_icons.jar,frmwebutil.jar,jacob.jar
    4.Enable all activex settings of your browser and do a proxy bypass setting in the browser as well..
    5. Check if you have download rights for downloading JAR files mentioned in archive_jini
    Edited by: anandk on Jul 24, 2012 1:18 PM

  • Can't access hotmail account from browser. cerficiate untrusted

    Can't access hotmail account from browsing, I tried to log into my hotmail account by visiting www.live.com and log into my account (add e-mail address and password) when sign in i get a message saying:There was a problem establishing asecure connection.( I get two tabs Details and Stop) I click on Detials I get another message saying: server Certificate Error. untrusted certificate,unable to determine the certificate origin, This has been disallowed by your administrator.. When i press on option Stop i get e message saying: refussing connection.This server has beed previously supporting HTTP Strict Transport Security. Due to SSL certificate warning/errors, a connection will not be made. Please could anybody help me.. I contact Vodafone they said it's microsoft issue then the latter said it's blackberry problem. i have tried everything nothing seems to work.. I don't want to register my hotmail account on my BB, but i want to access it through browsing as i do on my PC.. I will be really gratful.. thank you
    Solved!
    Go to Solution.

    Ggggrrrr, i really hope that's wrong, i would also be moving away from BB sharpish if that's the case. Hoping someone cleverer than me can come up with a solution, the BB manual certainly doesn't help. Like the first poster I have tried getting vodafone to help and also hotmail, both without success.

  • Access certificate from a DoD CAC card with Sun Java 1.4.2 Plug-in

    We are using CAC cards with ActivCard Software. We are using Sun Java JVM 1.4.2 with Internet Explorer. The problem is that Sun Java does not use the certificate in the browser certificate store for HTTPS client authentication.
    The solution from Sun is to export the certificate as a PKCS12 format and add 3 parameters to the Java Plug-in. The parameters are
    -Djavax.net.ssl.keyStore=<client_keystore_file_path>
    -Djavax.net.ssl.keyStorePassword=<password to access the client keystore file>
    -Djavax.net.ssl.keyStoreType=<keystore_type>
    Exporting the certificate from the CAC card is not an option for us.
    This is a big problem for us. Does anyone have any ideas on a way to get the Java Plug-in to access the CAC card without having to export the certificate?

    You could use JVM 1.3.X because it uses SSL from the Internet Explorer, not the JSSE SSL.
    Apart of this, you could see if the implementation of PKCS#11 for the forthcoming J2SDK 1.5 works with your card AND if JSSE can use the PKCS#11 Sun Provider. Download the beta and try it.

  • Unable to access CMC through web browser

    Hi All,
    I have a BOXI3.1 Windows install on a VM server. Install is up and running and I can access the CMC via Start menu on the server. When I attempt to access the CMC via browser on a remote computer it fails with a "IE cannot display the webpage" error message.
    I have tried http://alias:8080/cmcapp, http://servername:8080/cmcapp and http://IP address:8080/cmcapp, but all fail.
    Is there a server setting or a BO setting that must be changed?
    Thanks in advance for you help!

    Hi Scott,
    The communication should be two way communication. In both machine host entries the other machine details with hostname should be entered. Try this way should work and if any firewall configured please allow both the machines to communicate.
    If this doesn't work then check for the following:
    In VM there is an option configured to Ethenet called Host Only entry turned it to bridged will solve the problem.
    Regards,
    Pawan

  • Accessing AIRHelp Installed on a Central Location

    Hi all,
    Is there a way to be able to access AIRHelp installed on one location from multiple machines? We do not want our customers to install AIR on every machine they want to access the help from. Even AIR Browser help poses this issue? Is there a way to address this?
    Thank you!
    -Amit

    In the case of desktop AIR Help (.AIR file) it is installed on the PC so that does mean no one else can view it. It cannot be run from a server.
    Browser based AIR Help runs from a server so anyone with access to that server can view it.
    See the AIR articles on my site.
    See www.grainge.org for RoboHelp and Authoring tips
    @petergrainge

  • New Install - web browser?

    I just installed OEL6 on a VirtualBox. Itis running the desktop, but it seems there is no browser installed.
    Is there some kind of package manage for OEL6? I'm coming from Windows, so not sure how to do this.
    Cheers,
    Daniel

    Oracle Linux 6, like RHEL 6 seems to install a browser called Konqueror, which you should find in the Applications - Internet menu. The Globe icon in the menu bar point's to Firefox, which does not seem to be installed by default, although I think I selected the Gnome Desktop at install.
    Anyway, Firefox if you prefer, is easy to install once you setup yum package manager. Oracle provides public yum access if you simply follow the instructions at http://public-yum.oracle.com Don't forget to edit the file enable the repository for OL6.
    Then as root or user type: sudo yum install firefox

  • Cannot access Siebel application through browser

    Hi,
    We have installed Siebel demo quickstart SIA 8.1.1 in one laptop.The Siebel application works fine. The only problem is that we cannot access the Siebel application through a browser. We have to launch the Siebel application from Windows program menu.We need to set up the Siebel application so that we can access it through IE browser. There are some settings that need to be set up in the .cfg files to make the application available trough Internet Explorer.
    We have already tried using the url http://servername:8081/callcenter_enu/start.swe? But it returns "page cannot be displayed". We are accessing the application from the host computer.
    Regards
    CP

    Are you able to connect with dedicate client?
    if yes, then you just to need to verify setting/configuration for web server. Which can be found in installation guide.
    Also could you please share logs. Error you are getting is quite generic and have multiple symptoms.
    Have you tried to search on Oracle Support. There is complete article available for this error.
    Regards,
    Rajesh Kumar

  • How to access the Web Service Browser

    Hi,
    I need to access the Web Service Browser to generate a Web Service Description.
    How can I do it?
    I use the follow url:
    http://<host_name>:<port_number>/sap/bc/bsp/sap/WebServiceBrowser/search.html?sap-client=<relevant_client>
    but I can't say how to determine values for the three placeholders.
    Help me please.
    THANKS

    Hi Andrea,
    you can access the web services in sap transaction SICF. Then right click on the
    service and choose "test". The hostname is the host on where the sap system
    runs.
    The port ´number can be seen in transaction SMICM -> shift + F1. Here you can see
    the portnumer assigned to the HTTP protocol.
    And the client is the sap client (standard client) for which the service is configured.
    Hope this helps.
    KR,
    Andreas

  • IF UPDATES TO APPS THAT CAME WITH OUR MAC ARE FREE, WHY DOES APPLE REQUIRE BILLING INFORMATION TO BE COMPLETED IN THE SCREEN JUST BEFORE ACCESS TO INSTALLING FREE UPDATES???

    IF UPDATES TO APPS THAT CAME WITH OUR MAC ARE FREE, WHY DOES APPLE REQUIRE BILLING INFORMATION TO BE COMPLETED IN THE SCREEN JUST BEFORE ACCESS TO INSTALLING FREE UPDATES???

    It is necessary to confirm your identity as the 'buyer'.  Please do not use all capital letters.  It is not well regarded here and can be tricky to read for some. Thank you.

  • Multiple certificate stored in Browser

    I run certificate request using https://.../oca/sso_oca_link and also /oca/user.
    eg. with these User DN:
    => cn=ferry,cn=users,dc=subdom,dc=mydomain,dc=com
    => cn=tova,cn=users,dc=subdom,dc=mydomain,dc=com
    => cn=ferry,cn=users,dc=subdom,dc=mydomain,dc=com
    By requesting certificate several times from the same PC using several user account, have result in multiple certificate stored in Browser.
    When visit my secure web using Internet Explorer 6, a window raised and lists these
    "users"
    "users"
    "users"
    By using Netscape Navigator 7.1: a window appear with a bit more information display
    "users's myOrganisation"
    "users's myOrganisation"
    "users's myOrganisation"
    and some explanation eg
    Issued to:
    Subject: CN=ferry, CN=users, DC=subdom, DC=domain, DC=com
    Serial Number: 1C
    Valid from 23/09/2005 14:53:42 to 23/09/2006 14:53:42
    Issued by:
    Subject: CN=MyCcertificate Authority,...
    How to display USER NAME (according to CN) in the list instead of "users" ?
    or this is the expected behaviour?
    TIA,
    ferry

    Ok. I've found the solution.
    For reference to all you guys:
    ByteArrayInputStream bais = new ByteArrayInputStream( (byte[])attr.get() );
    CertificateFactory cf = CertificateFactory.getInstance("X.509");
    cert = (X509Certificate)cf.generateCertificate(bais);

Maybe you are looking for