Saturday, September 29, 2007

Ran my head against Vista, IE7 security

Yesterday I scratched some Vista security teeths. Using a self-signed certificate for a web application for allowing https wasn't a walk in the park on Vista, IE 7 - but what was the problem?

Internet Explorer 7 just kept saying "Internet Explorer cannot display the web page". I could register my application activity in the server log, but when the browser should show the response I got the error page.

Firefox worked fine and and IE7 on Windows XP likewise.

It turned out that Vista only accepts the certificate if the signature algorithm is RSA and not the default SHA1 (if you a using the Java keytool) . Some Jira documentation about ssl/https lead me in the right direction :-)

Well after creating a new certificate using the RSA encryption all worked fine.

No comments: