[OPEN-ILS-DEV] Certificate question

Dan Scott denials at gmail.com
Fri Jun 6 10:12:23 EDT 2008


2008/6/6 Robert <glibrarysystem at gmail.com>:
> How can I import the certificate into the staff client on a windows machine
> so that I don't have to accept it every time I start the staff client? I
> have tried to import it through the normal means, internet options ->
> content -> certificates but it still asks me to accept it after that. Also,
> I can't accept it permanently when it asks. I click the radio button for
> Accept this certificate permanently and then click ok but it brings the same
> screen back up every time I do it. The only way I can get it to continue on
> loading the staff client is to temporarily accept the certificate for the
> session. Does anyone have any suggestions as to how to make this permanent?

Hi Robert:

I'm not sure it's possible to permanently accept a self-signed
certificate in the staff client - particularly through Windows'
certificate methods, which I believe would only affect Internet
Explorer. The staff client is built on Mozilla XUL which uses a
separate means of ensuring secure communications.

If you purchase and deploy a SSL certificate from a trusted certified
authority, I believe that you won't be prompted to accept the
certificate at all (until it expires, etc). There are a number of web
sites that provide more information about SSL, and that describe how
to purchase and deploy certified SSL keys: here's one -
http://www.sitepoint.com/article/securing-apache-2-server-ssl

-- 
Dan Scott
Laurentian University


More information about the Open-ils-dev mailing list