Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsWhite Papers
Discussion GroupsFirst AidDatabasesJavaBeansGUIJava 3DVirtual MachineCORBASecurityToolsGeneral
Java DirectoryOpen Source ProjectsSample Book ChaptersUser GroupsWeb Resources
Related Topics
Databases.NETMore Topics ...

Java Forum / Security / December 2003

Tip: Looking for answers? Try searching our database.

automatic download of java.policy to a client?

Thread view: 
Joe V. - 11 Dec 2003 00:28 GMT
I know this kind of defeats the purpose of the java.policy file on the
client machine, but is there anyway to dynamically download the policy from
a webserver? Our customers are beginning to complain about the extra step
required to copy this policy file to every client ... is there a better way
to do this?

thanks in advance!

joe
VK - 12 Dec 2003 00:38 GMT
Buy commercial code-signing certificate (Thawte, Verisign or else) and
serve your app / applet in properly signed JAR. Customers will just love
it, trust me.
Joe V. - 12 Dec 2003 05:37 GMT
Thanks!

But, our product management doesn't want to add on any further costs to the
product. Is there something that can be done for free? Maybe some
open-source implementation?

> Buy commercial code-signing certificate (Thawte, Verisign or else) and
> serve your app / applet in properly signed JAR. Customers will just love
> it, trust me.
JK - 12 Dec 2003 09:20 GMT
Well, set up your own CA and let customers install your CA certificate
in the browser. You can use OpenSSL, which is for free, or even java's
keytool should do.

JK.

> Thanks!
>
[quoted text clipped - 5 lines]
>>serve your app / applet in properly signed JAR. Customers will just love
>>it, trust me.
Skippy - 12 Dec 2003 14:48 GMT
> Well, set up your own CA and let customers install your CA certificate
> in the browser. You can use OpenSSL, which is for free, or even java's
> keytool should do.

that keytool is quite complex, but works great. if your app is a applet or a
webstart-app, the end-user will have to click the magic 'Yes' or 'Accept'
button before things work.
Roedy Green - 12 Dec 2003 22:19 GMT
>But, our product management doesn't want to add on any further costs to the
>product. Is there something that can be done for free? Maybe some
>open-source implementation?

You do a Java Web Start that copies the file in the install method.

--
Canadian Mind Products, Roedy Green.
Coaching, problem solving, economical contract programming.
See http://mindprod.com/jgloss/jgloss.html for The Java Glossary.


Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.