Tue, 23 Jun 2009 15:01:00 GMT——“林子里有两条路，我走上了人迹罕至的一条，于是看到了别人不曾看到的风景。”http://blog.csdn.net/roamoner/http://blog.csdn.net/roamoner/archive/2009/06/23/4291688.aspxhttp://blog.csdn.net/roamoner/comments/4291688.aspx0http://blog.csdn.net/roamoner/comments/commentRss/4291688.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=4291688<br />支付宝数字证书常见问题解决思路<br /><br /><br /><br /><br />1     提交申请时的错误... 1<br />1.1         800A138F. 1<br />1.1.1      浏览器安全域设置导致控件创建失败... 2<br />1.1.2      控件被屏蔽... 2<br />1.1.2.1     修改注册表... 2<br />1.1.2.2     浏览器设置解除屏蔽（xp）... 3<br />1.1.2.3     浏览器设置解除屏蔽（vista、IE7）... 5<br />1.2         800A01B6，80070057. 6<br />1.3         80090016. 7<br />1.3.1      设置文件夹选项... 7<br />1.3.2      RSA文件夹授权... 8<br />1.3.2.1    NTFS格式... 9<br />1.3.2.2    FAT32格式... 13<br />1.3.3      Certificates文件夹授权... 15<img src ="http://blog.csdn.net/roamoner/aggbug/4291688.aspx" width = "1" height = "1" /><img src="http://www1.feedsky.com/t1/236637024/roamoner/csdn.net/s.gif?r=http://blog.csdn.net/roamoner/archive/2009/06/23/4291688.aspx" border="0" height="0" width="0" style="position:absolute" /><p class="fswww1"><a href="http://www1.feedsky.com/r/l/csdn.net/roamoner/236637024/art01.html" target="_blank"><img border="0" ismap="ismap" src="http://www1.feedsky.com/r/i/csdn.net/roamoner/236637024/art01.gif" onerror="this.style.display='none'" /></a></p>Tue, 23 Jun 2009 23:01:00 +0800Roamonerhttp://blog.csdn.net/roamoner/archive/2009/06/23/4291688.aspx#Feedbackhttp://blog.csdn.net/roamoner/archive/2009/06/23/4291688.aspxRoamonerhttp://blog.csdn.net/roamoner/archive/2009/06/23/4291688.aspxhttp://blog.csdn.net/roamoner/feed.aspxcsdn.net/roamoner/~1199268/236637024/1199246http://blog.csdn.net/roamoner/archive/2009/06/16/4273519.aspxhttp://blog.csdn.net/roamoner/comments/4273519.aspx0http://blog.csdn.net/roamoner/comments/commentRss/4273519.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=4273519<br />最近在做支付宝数字证书对window7的支持时遇到CertEnroll的问题，<br />win7还是RC版，发现一个小问题，CertEnroll控件clsid:127698e4-e730-4e5c-a2b1-21490a70c8a1无法在iframe嵌入的网页中用脚本创建，必须在父窗口中创建对象，然后在子窗口中调用<br />于是，引入如下脚本，在子窗口中写脚本在父窗口中创建对象<br /><br /><br /><br /><br />oElement = object . insertAdjacentElement ( sWhere , oElement ) <br />参数： <br />oElement :　 必选项。要插入到 object 邻近的对象。 <br />sWhere :　 必选项。beforeBegin | afterBegin | beforeEnd | afterEnd <br /><br />beforeBegin :　 将 oElement 插到 object 的开始标签之前。 <br />afterBegin :　 将 oElem<img src ="http://blog.csdn.net/roamoner/aggbug/4273519.aspx" width = "1" height = "1" /><img src="http://www1.feedsky.com/t1/236637025/roamoner/csdn.net/s.gif?r=http://blog.csdn.net/roamoner/archive/2009/06/16/4273519.aspx" border="0" height="0" width="0" style="position:absolute" /><p class="fswww1"><a href="http://www1.feedsky.com/r/l/csdn.net/roamoner/236637025/art01.html" target="_blank"><img border="0" ismap="ismap" src="http://www1.feedsky.com/r/i/csdn.net/roamoner/236637025/art01.gif" onerror="this.style.display='none'" /></a></p>Tue, 16 Jun 2009 23:30:00 +0800Roamonerhttp://blog.csdn.net/roamoner/archive/2009/06/16/4273519.aspx#Feedbackhttp://blog.csdn.net/roamoner/archive/2009/06/16/4273519.aspxRoamonerhttp://blog.csdn.net/roamoner/archive/2009/06/16/4273519.aspxhttp://blog.csdn.net/roamoner/feed.aspxcsdn.net/roamoner/~1199268/236637025/1199246http://blog.csdn.net/roamoner/archive/2008/12/23/3590471.aspxhttp://blog.csdn.net/roamoner/comments/3590471.aspx0http://blog.csdn.net/roamoner/comments/commentRss/3590471.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=3590471[Java] Simple WSS4J with Axis Tutorial <br />This is a simple tutorial for getting started with WSS4J. It’s based on a tutorial posted on the WSS4J mailing list by Rami Jaamour, but I’ve added a few clarifications and variants of the code samples. Rami should get all credits for this tutorial; I’m just a newbie trying to learn how to use this tool!<br />Updates<br />2006-03-29 - If you get an exception like this one below, it is recommended to look at which Axis version your are using and consid<img src ="http://blog.csdn.net/roamoner/aggbug/3590471.aspx" width = "1" height = "1" /><p class="fswww1"><a href="http://www1.feedsky.com/r/l/csdn.net/roamoner/236637026/art01.html" target="_blank"><img border="0" ismap="ismap" src="http://www1.feedsky.com/r/i/csdn.net/roamoner/236637026/art01.gif" onerror="this.style.display='none'" /></a></p>Wed, 24 Dec 2008 01:03:00 +0800Roamonerhttp://blog.csdn.net/roamoner/archive/2008/12/23/3590471.aspx#Feedbackhttp://blog.csdn.net/roamoner/archive/2008/12/23/3590471.aspxRoamonerhttp://blog.csdn.net/roamoner/archive/2008/12/23/3590471.aspxhttp://blog.csdn.net/roamoner/feed.aspxcsdn.net/roamoner/~1199268/236637026/1199246http://blog.csdn.net/roamoner/archive/2008/07/30/2740770.aspxhttp://blog.csdn.net/roamoner/comments/2740770.aspx0http://blog.csdn.net/roamoner/comments/commentRss/2740770.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=2740770<br />CAS（Central Authentication Server）耶鲁大学开发的SSO产品。<br />服务器端使用 Servlet，通过SSL和客户端传递信息。<br />CAS java客户端使用Filter技术，拦截需要保护的资源URL。<br />CAS两种模式：Agent和Proxy<br />1. Agent模式原理：<br />   （1）用户访问APP，APP未得到ST，重定向到IDP；<br />   （2）用户在IDP登录成功之后，IDP生成TGT并放在Agent（浏览器），作为会话标识；<br />               IDP为RP（APP）生成ST并缓存，ST返回到Agent；<br />    （3）Agent重定向到APP并出示ST；<br /><img src ="http://blog.csdn.net/roamoner/aggbug/2740770.aspx" width = "1" height = "1" /><p class="fswww1"><a href="http://www1.feedsky.com/r/l/csdn.net/roamoner/236637027/art01.html" target="_blank"><img border="0" ismap="ismap" src="http://www1.feedsky.com/r/i/csdn.net/roamoner/236637027/art01.gif" onerror="this.style.display='none'" /></a></p>Thu, 31 Jul 2008 00:35:00 +0800Roamonerhttp://blog.csdn.net/roamoner/archive/2008/07/30/2740770.aspx#Feedbackhttp://blog.csdn.net/roamoner/archive/2008/07/30/2740770.aspxRoamonerhttp://blog.csdn.net/roamoner/archive/2008/07/30/2740770.aspxhttp://blog.csdn.net/roamoner/feed.aspxcsdn.net/roamoner/~1199268/236637027/1199246http://blog.csdn.net/roamoner/archive/2008/07/30/2740762.aspxhttp://blog.csdn.net/roamoner/comments/2740762.aspx0http://blog.csdn.net/roamoner/comments/commentRss/2740762.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=2740762<br />轻量级第三方认证<br />    LTPA(Lightweight Third Party Authentication)技术是IBM的标准。当某用户访问某WebSphere URL时,系统会提示他输入用户名和口令进行登录。这时用户可以输入他的惟一标识符,通过验证后,Web服务器将把该用户的Web 浏览器中显示的Web 站点内容发送回来。在场景后台,WebSphere入口网站服务器将会建立包含已鉴别使用者认证的单点登录Cookie(默认值是LTPA记号),并且会一直发送该cookie, 而浏览器通常的默认设置是允许接收cookie的,因此用户的浏览器将保存这个cookie。 LTPA cookie是临时的,只在浏览器内存中存留,用户如果关闭浏览器,cookie就会被永久删除。LTPA cookie的特点如下：<br />　　(1<img src ="http://blog.csdn.net/roamoner/aggbug/2740762.aspx" width = "1" height = "1" /><p class="fswww1"><a href="http://www1.feedsky.com/r/l/csdn.net/roamoner/236637028/art01.html" target="_blank"><img border="0" ismap="ismap" src="http://www1.feedsky.com/r/i/csdn.net/roamoner/236637028/art01.gif" onerror="this.style.display='none'" /></a></p>Thu, 31 Jul 2008 00:34:00 +0800Roamonerhttp://blog.csdn.net/roamoner/archive/2008/07/30/2740762.aspx#Feedbackhttp://blog.csdn.net/roamoner/archive/2008/07/30/2740762.aspxRoamonerhttp://blog.csdn.net/roamoner/archive/2008/07/30/2740762.aspxhttp://blog.csdn.net/roamoner/feed.aspxcsdn.net/roamoner/~1199268/236637028/1199246http://blog.csdn.net/roamoner/archive/2008/07/20/2681707.aspxhttp://blog.csdn.net/roamoner/comments/2681707.aspx0http://blog.csdn.net/roamoner/comments/commentRss/2681707.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=2681707Exception in thread "main" java.io.IOException: error constructing MAC: java.security.NoSuchProviderException: JCE cannot authenticate the provider BC at org.bouncycastle.jce.provider.JDKPKCS12KeyStore.engineLoad(JDKPKCS12KeyStore.java:714) at java.security.KeyStore.load(KeyStore.java:1150)下载BC的源代码，自己编译之后使用时会抱错；但是使用jar包则正常。因为BC会检查。<img src ="http://blog.csdn.net/roamoner/aggbug/2681707.aspx" width = "1" height = "1" /><p class="fswww1"><a href="http://www1.feedsky.com/r/l/csdn.net/roamoner/236637029/art01.html" target="_blank"><img border="0" ismap="ismap" src="http://www1.feedsky.com/r/i/csdn.net/roamoner/236637029/art01.gif" onerror="this.style.display='none'" /></a></p>Mon, 21 Jul 2008 06:45:00 +0800Roamonerhttp://blog.csdn.net/roamoner/archive/2008/07/20/2681707.aspx#Feedbackhttp://blog.csdn.net/roamoner/archive/2008/07/20/2681707.aspxRoamonerhttp://blog.csdn.net/roamoner/archive/2008/07/20/2681707.aspxhttp://blog.csdn.net/roamoner/feed.aspxcsdn.net/roamoner/~1199268/236637029/1199246http://blog.csdn.net/roamoner/archive/2008/07/20/2681665.aspxhttp://blog.csdn.net/roamoner/comments/2681665.aspx0http://blog.csdn.net/roamoner/comments/commentRss/2681665.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=2681665<br />PKCS12和JKS是keystore的格式，但是P12是不支持TrustedCertificateEntry的，如果要写入信任证书，只能使用JKS<br />关于KeyStore，JDK文档如下解释：<br />http://gceclub.sun.com.cn/Java_Docs/html/zh_CN/api/java/security/KeyStore.html<br /><br />KeyStore 管理不同类型的项。每种类型的项都实现 KeyStore.Entry 接口。提供了三种基本的 KeyStore.Entry 实现： KeyStore.PrivateKeyEntry<br />此类型的项保存一个加密的 PrivateK<img src ="http://blog.csdn.net/roamoner/aggbug/2681665.aspx" width = "1" height = "1" /><p class="fswww1"><a href="http://www1.feedsky.com/r/l/csdn.net/roamoner/236637030/art01.html" target="_blank"><img border="0" ismap="ismap" src="http://www1.feedsky.com/r/i/csdn.net/roamoner/236637030/art01.gif" onerror="this.style.display='none'" /></a></p>Mon, 21 Jul 2008 06:30:00 +0800Roamonerhttp://blog.csdn.net/roamoner/archive/2008/07/20/2681665.aspx#Feedbackhttp://blog.csdn.net/roamoner/archive/2008/07/20/2681665.aspxRoamonerhttp://blog.csdn.net/roamoner/archive/2008/07/20/2681665.aspxhttp://blog.csdn.net/roamoner/feed.aspxcsdn.net/roamoner/~1199268/236637030/1199246http://blog.csdn.net/roamoner/archive/2007/05/25/1625160.aspxhttp://blog.csdn.net/roamoner/comments/1625160.aspx0http://blog.csdn.net/roamoner/comments/commentRss/1625160.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=1625160使用ServletRequestWrapper和Filter实现对HttpServletRequest的重载，使用“装饰模式”<img src ="http://blog.csdn.net/roamoner/aggbug/1625160.aspx" width = "1" height = "1" /><p class="fswww1"><a href="http://www1.feedsky.com/r/l/csdn.net/roamoner/236637031/art01.html" target="_blank"><img border="0" ismap="ismap" src="http://www1.feedsky.com/r/i/csdn.net/roamoner/236637031/art01.gif" onerror="this.style.display='none'" /></a></p>Fri, 25 May 2007 18:40:00 +0800Roamonerhttp://blog.csdn.net/roamoner/archive/2007/05/25/1625160.aspx#Feedbackhttp://blog.csdn.net/roamoner/archive/2007/05/25/1625160.aspxRoamonerhttp://blog.csdn.net/roamoner/archive/2007/05/25/1625160.aspxhttp://blog.csdn.net/roamoner/feed.aspxcsdn.net/roamoner/~1199268/236637031/1199246http://blog.csdn.net/roamoner/archive/2006/11/29/1420240.aspxhttp://blog.csdn.net/roamoner/comments/1420240.aspx0http://blog.csdn.net/roamoner/comments/commentRss/1420240.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=1420240.<img src ="http://blog.csdn.net/roamoner/aggbug/1420240.aspx" width = "1" height = "1" /><p class="fswww1"><a href="http://www1.feedsky.com/r/l/csdn.net/roamoner/236637032/art01.html" target="_blank"><img border="0" ismap="ismap" src="http://www1.feedsky.com/r/i/csdn.net/roamoner/236637032/art01.gif" onerror="this.style.display='none'" /></a></p>Thu, 30 Nov 2006 00:11:00 +0800Roamonerhttp://blog.csdn.net/roamoner/archive/2006/11/29/1420240.aspx#Feedbackhttp://blog.csdn.net/roamoner/archive/2006/11/29/1420240.aspxRoamonerhttp://blog.csdn.net/roamoner/archive/2006/11/29/1420240.aspxhttp://blog.csdn.net/roamoner/feed.aspxcsdn.net/roamoner/~1199268/236637032/1199246http://blog.csdn.net/roamoner/archive/2006/11/06/1369488.aspx头设置<img src ="http://blog.csdn.net/roamoner/aggbug/1369488.aspx" width = "1" height = "1" /><p class="fswww1"><a href="http://www1.feedsky.com/r/l/csdn.net/roamoner/236637033/art01.html" target="_blank"><img border="0" ismap="ismap" src="http://www1.feedsky.com/r/i/csdn.net/roamoner/236637033/art01.gif" onerror="this.style.display='none'" /></a></p>Mon, 06 Nov 2006 22:05:00 +0800Roamonerhttp://blog.csdn.net/roamoner/archive/2006/11/06/1369488.aspxRoamonerhttp://blog.csdn.net/roamoner/archive/2006/11/06/1369488.aspxhttp://blog.csdn.net/roamoner/feed.aspxcsdn.net/roamoner/~1199268/236637033/1199246