[ticker-user] Sticker and SSL trusted certificates

[Matthew Phillips]

On 12/05/2007, at 8:28 AM, David Arnold wrote:

> On 12/05/2007, at 8:12 AM, Andrew Davison wrote:
>
>> I am trying to get Sticker to do SSL but get a 'No trusted  
>> certificate
>> found" message. The home brew certificate i am using in my router  
>> has the right domain-name, is not expired, but obviously (since it  
>> is self-signed) is not 'trusted'.
>
> i would have thought that'd be fine, but i haven't ever tried SSL  
> with sticker (or je4, its underlying Elvin library).
>
>> How does Sticker judge these things and is it possible to override  
>> this error, like all web browsers and mail clients allow you to do.
>
> that's probably a question for Matt (sticker's author), but he's  
> currently hiking in the hills of Spain or something, so he might  
> not be reading this list every day :-)

I'm back now. Sigh ... hiking in Spain is so much more fun than this  
windowless office...

Anyway, Sticker just uses je4 for all its Elvin'ing, so there's not  
much I can do unfortunately. je4 doesn't have a callback in the case  
of untrusted certs, so Sticker can't ask the user.

When Sticker gets ported to the (nascent) Java client library that's  
being developed as part of Avis, that will be an option we can add.

Matt.


IMPORTANT: This email remains the property of the Australian Defence Organisation and is subject to the jurisdiction of section 70 of the CRIMES ACT 1914.  If you have received this email in error, you are requested to contact the sender and delete the email.