This is a browser-end problem. What's happening is that the "Secure
Object Provider" is set to Medium-grade security... which notifies the
user before their certificate is used. (If it was High-grade security, it
would prompt them for their password each time their certificate is used.)
I can't remember how to disable this, or change the setting... I'll look
this weekend, and see if I can find it.
---
Mat Butler, Winged Wolf <[EMAIL PROTECTED]>
SPASTIC Web Engineer SPASTIC Server Administrator
----Begin FurryCode v1.3----
FCWw5amrsw A- C+ D H+++ M+++++[servercoder] P+ R++ T+++ W Z++ Sm++
RLCT/M*/LW* a cl/u/v++++>+++++ !d e- f>++++ h++ iwf+++ j p->+ sm++
----End FurryCode v1.3----
On Fri, 7 Jul 2000, Gianluca Morello wrote:
> I configured a good working configuration of Apache-SSL,
> I created my own CA.
> All is up and working:
> I have a web based certificate request,
> an automatic signing process of the client certificates
> and automatic downloading of certicates.
> All works well,
>
> Only one thing:
>
> When (MS Internet Explorer) clients connect to my secure web server,
> they can choose their client certificate. OK.
> The authentification of certificates is OK.
> The problem is that when a client make a page request (through links or forms)
> in their browser a window appears saying that they are exchange data with the server
> signing these data with their private key,
> so in their navigation, for each page they view they have to close this information
>window with a nervous effect.
>
> So the question :
> There's a way to avoid these annoying popup windows to appears.
>
> Note :
> I create the certificate request using the Enroll.CreatePKCS10 method of Enroll
>object of MS Internet Explorer,
> and the download of the signed client certificate is made with the
>IControl.AcceptPKCS7
> method.
> I used php , vba and a short shell script to do all the stuff.
>
> Thanks.
>
>
>
>
>
>
>
>
>
>
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
