JWS newbie security question

Thread view:

aaronfude@gmail.com - 21 Aug 2006 20:39 GMT

Hi,

Trying to deploy my java application on the intranet via JWS for the
very first time. All of my jars are unsigned and I get an error
(described below). I though that the user was supposed to decide
whether or not to allow access. So why do I get an error instead?

An error occurred while launching/running the application.

Title: Yadda Yadda
Vendor: IT Department
Category: Security Error

Unsigned application requesting unrestricted access to system
Unsigned resource: http://localhost/infoflow/infoflow.jar

Thanks!

Aaron Fude

Reply to this Message

Rohit Kumbhar - 21 Aug 2006 21:54 GMT

> Hi,
>
> Trying to deploy my java application on the intranet via JWS for the
> very first time. All of my jars are unsigned and I get an error
> (described below). I though that the user was supposed to decide
> whether or not to allow access. So why do I get an error instead?

This will also depend on the settings on the client machine. The option
of allowing user to grant permission to unauthorised content should be
checked.

Rohit

Reply to this Message

aaronfude@gmail.com - 21 Aug 2006 23:54 GMT

> > Hi,
> >
[quoted text clipped - 8 lines]
>
> Rohit

Hi,

Thanks for the response. It is checked. Anywhere else I can look?

Thanks

Aaron Fude

Reply to this Message

Andrew Thompson - 22 Aug 2006 02:24 GMT

....

> > > Trying to deploy my java application on the intranet via JWS for the
> > > very first time. All of my jars are unsigned and I get an error
> > > (described below). I though that the user was supposed to decide
> > > whether or not to allow access.

Does the JNLP request 'all permissions'?

> > So why do I get an error instead?
> >
> > This will also depend on the settings on the client machine. The option
> > of allowing user to grant permission to unauthorised content should be
> > checked.

I had not heard that a client based permission/setting could
override the security normally associated with *JWS* (though
I am not saying it is not possible).

OTOH, you should be successful if you sign the Jar files,
even with a 'self generated'* certificate.

* I forget the exact term. One you make yourself, that is
not 'verified' by verisign or such. Alternately you might look
into the 'freemail' certificate they offer.

Andrew T.

Reply to this Message

JWS newbie security question

Free Magazines