Re: [Ejbca-develop] can move to next page with wrong password

[Tomas G. <to...@pr...>]

Hi Toru,

I think it is mostly historical and technical implementation reasons. Nothing is really sent to validate the information until after the second step. Technically there is no reason we could not validate it after the first step (as well).

Cheers,
Tomas

Toru Tanaka <tanaka_toru@g.ogis-ri.co.jp> skrev:

Hi all

This is cofirmation of specification.
When we issue client certificate, 
1. Access Public Web Page
2. Enter designated "user name" and "password"
3. Choice bit number etc and download

the above precedure is needed.
procedure is no problem.
But, in procedure 2 "Enter designated "user name" and "password""
even if wrong password is entered, I can move next page.
#certificate cannot download.

I wonder this implimentation.
Are there the reason of this implimentation ?

Thanks in advance

Toru Tanaka