Questions tagged [signed-applet]

A privileged applet signed by the digital certificate. Privileged applets do not have the security restrictions that are imposed on sandbox applets and can run outside the security sandbox.

Java applets are loaded on a client when the user visits a page containing an applet. The security model behind Java applets has been designed with the goal of protecting the user from malicious applets.

Applets are either sandbox applets or privileged applets. Sandbox applets are run in a security sandbox that allows only a set of safe operations. Privileged applets can run outside the security sandbox and have extensive capabilities to access the client.

Applets that are not signed are restricted to the security sandbox, and run only if the user accepts the applet. Applets that are signed by a certificate from a recognized certificate authority can either run only in the sandbox, or can request permission to run outside the sandbox. In either case, the user must accept the applet's security certificate, otherwise the applet is blocked from running.

Source: The Java Tutorials ("What Applets Can and Cannot Do")

126 questions
65
votes
16 answers

Java applet manifest - Allow all Caller-Allowable-Codebase

As of Java 7u45 an applet will display a warning message (even if signed with a trusted cert) if a webpage tries to interact with it via javascript and that page isn't listed in the manifest's Caller-Allowable-Codebase attribute. Release notes about…
William W
  • 1,776
  • 6
  • 21
  • 40
50
votes
4 answers

-tsa or -tsacert timestamp for applet jar self-signed

When I was trying to self-sign in the jar like below. jarsigner -keystore my keystore myjar.jar myalias It gives warning like: No -tsa or -tsacert is provided and this jar is not timestamped. Without a timestamp, users may not be able to validate…
Raja Peela
  • 1,366
  • 2
  • 14
  • 26
46
votes
4 answers

Why should I sign my JAR files?

Why should I sign my JAR files? I know that I need to sign my client-side JAR files (containing Applets) so that special things like filesystem access can be done, and so that the annoying bit at the bottom of windows doesn't show, but why else? And…
Chris Carruthers
  • 3,945
  • 6
  • 31
  • 31
14
votes
2 answers

Is it possible to sign a java applet for free?

I made a weird applet which allows you to paint with your voice. Obviously it requires access to the microphone, but Java applets are not allowed access unless they are signed. As far as I can tell its difficult and involves cryptography, and,…
Nathan
  • 6,095
  • 10
  • 45
  • 54
13
votes
7 answers

Issues with Java 7u65

Last night a new Java 7 update has been released: 7u65. I have a web application where a service applet is loaded, and after the update, my tests on different PCs did not show issues nor wrong behaviors. Later, I started to receive issue reports…
David
  • 1,282
  • 3
  • 18
  • 40
8
votes
2 answers

How can I set the publisher name in my signed jar file, using a self-signed certificate?

I've compiled my applet, created a jar file, generated a keystore db with keytool, signed the jar with jarsigner, and exported the public key cert with keytool. Now when I run my applet in the browser it does work, after prompting me if I'm sure I…
7
votes
1 answer

Issues in Launching the signed applet with java 7u45

We have an applet that also uses javascript to applet communication as well. After java has been upgraded to 7u45, as per this link, we have made the changes in building the jars using manifest like: Added Permissions: all-permissions to Manifest…
6
votes
4 answers

Copy/Paste not working in a signed Applet

I've a signed applet (which verifies correctly with jarsigner) that for some reason will not allow copy and paste from the system clipboard into a JTextField despite the documentation telling me that it is supposed to work for signed applets.…
6
votes
6 answers

JRE 1.7u45 unable to load an applet containing some unsigned entries

I am getting the following error while loading a java applet on JRE 1.7u45. java.lang.SecurityException: com.sun.deploy.net.JARSigningException: Found unsigned entry in resource #name of the applet# at…
Gaurang
  • 144
  • 1
  • 1
  • 9
5
votes
3 answers

Inconsistency between ZipEntry size for ZipInputStream and JarInputStream

I have bunch of image files in a zip file which I am reading using ZipInputStream and Iterating over ZipEntry from an Applet. ZipInputStream zis = new ZipInputStream(in); ZipEntry ze = null; while ((ze = zis.getNextEntry()) !=…
Deepak Chaudhry
  • 219
  • 4
  • 12
5
votes
4 answers

Avoid security level blocking without adding url in exception site list

I have created Java signed applet, it runs perfectly if I set my Java(JRE 8) security level high and add my site url in exception site list. But if we do not add site url in exception site list, java security exception comes as explained here : add…
Java
  • 2,451
  • 10
  • 48
  • 85
5
votes
2 answers

Java latest update security pop up

How should I remove the security pop up from developer side? I don't want the user to keep clicking "don't block". I have all my *.jar file signed. Any help? and if I have click more information Again, as I said, I have all of my *.jar file…
Harts
  • 4,023
  • 9
  • 54
  • 93
3
votes
1 answer

How To Sign a Jar File for an Applet?

Does Singing a Jar File For an Applet use the same process as signing a Jar file for an application?? If so, can someone tell me how to sign it? I have an Applet that writes to your APPDATA, kinda like Minecraft.
Jay
  • 143
  • 2
  • 11
3
votes
1 answer

to set "Publisher" for JApplet

I have generated the keystore and its inner key. Then I signed my test applet. But each time I start my jnlp applet I can see the Internet browser security Warning dialog which shows that... Publisher: UNKNOWN From: http://localhost:8080... What…
user592704
  • 3,674
  • 11
  • 70
  • 107
3
votes
0 answers

AccessControlException when Applet tries to access java.io.tmpdir

I have a signed Applet that loads images. Applet has background threads retrieving images from server. Initially Applet loads images with no problem, but after loading about 7 images I'm getting below error: java.security.AccessControlException:…
Marquinio
  • 4,601
  • 13
  • 45
  • 68
1
2 3
8 9