Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsWhite Papers
Discussion GroupsFirst AidDatabasesJavaBeansGUIJava 3DVirtual MachineCORBASecurityToolsGeneral
Java DirectoryOpen Source ProjectsSample Book ChaptersUser GroupsWeb Resources
Related Topics
Databases.NETMore Topics ...

Java Forum / Security / February 2005

Tip: Looking for answers? Try searching our database.

JVM 1.5 breaks SocketPermission!!!!

Thread view: 
SPG - 03 Feb 2005 15:41 GMT
Hi,

We have an applet that connects back to the server from which it came on a
secure HTTP connection.

IE: codebase=http://192.168.1.1/, and applet then opens HTTPURLConnection to
https://192.168.1.1:443

Now, we had to do a few things previously to handle Certificates and
Hostname verification. That works from 1.1 through to 1.4.2_06.

It was actually working on 1.5 also up until the new update came out for it
and seems to have blown the whole thing up!

We now get the following error when going through a proxy:

java.security.AccessControlException access denied
java.net.SocketPermission ldnproxy 80 connect resolve
   at java.security.AccessControlContext.checkPermissionUnknown Source
   at java.security.AccessController.checkPermissionUnknown Source
   at java.lang.SecurityManager.checkPer....etc

Any ideas what could have suddenly cause this to break? Going back to
1.4.2xx works fine.

Steve
SPG - 03 Feb 2005 16:14 GMT
Just a follow up..

We have found if the IE proxy settings are set so that the secure https
connections go through the proxy, but specify port 443, then the new
(*broken*) jvm allows the connection to work correctly..

Hmm...

> Hi,
>
[quoted text clipped - 22 lines]
>
> Steve


Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.