How to use digital certificates with jsf?

Question

I need to sign a xml document using a token device in the client. How can i extract the private key from the token using JSF? I used to do it using an Applet.

if the token is worth anything, it won't let you have the secret... — Robert, Apr 21 '18 at 02:34
Try in plain html and you can port that solution to jsf fairly easily. — Kukeltje, Apr 21 '18 at 05:41
Plain HTML? How it would help me to access the token in the client machine? — Fabio Moraes, Apr 23 '18 at 17:53

score 0 · Accepted Answer · edited Apr 21 '18 at 13:01

0

Basically you can't use a token device on a browser for any other thing than SSL authentication.

The security restrictions of the browsers does not allow you to access the system certificate keystore or use a PKCS#11 driver so you can not make a digital signature

In the old days the browsers allowed to run applets, but now it is not possible anymore. You would need to use an external software

edited Apr 21 '18 at 13:01

Kukeltje

12,223
4
24
47

answered Apr 21 '18 at 12:19

pedrofb

37,271
5
94
142

You mean using sofware installed in the client? – Fabio Moraes Apr 23 '18 at 17:51
Yes, it is a common solution when you have to use resources that are not accessible from the browser. – pedrofb Apr 23 '18 at 19:00

How to use digital certificates with jsf?

1 Answers1