Java Security Warning

[Neil]

Hi,

We have a web portal that's currently been run in a isolated environment. In places the users are reporting an error

"The application's digital signture has been verified. Do you want to run the application?"

Name: appfile
Publisher: ABC
From: XYZ

With the option to run or cancel

How do I surpress these errors so the application is always run in this case? I've done a google and it appears I have to edit the java.policy file, but I can't find any documentation on what to put in this file other than allowing everything through; which might be ok in a sandbox environment but will give me headaches when it comes to going live.

Many Thanks in advance.

NT

[Norm]

the users are reporting an error

What program gives the error message? What kind of app is it?
Is it an applet in an HTML page?
What is the applet doing that it needs permission?


Changes to the .java.policy file would have to be made for all users on their PCs. Not an easy solution. The policytool is used to change the .java.polciy file and using it can be tricky.

[Neil]

This is an applet within a webpage.

It looks like the error message is coming from Java RE, if "run" is selected then the message doesn't reappear for that session of internet explorer. If IE is reopened, the message reappears.

I would put an image up, but I only have 2 posts!! (Including this one)

Agreed, the policy tool has given me a headache!!!

I did see that once the user has hit run, a certificate is under control panel \ java, select the security tab and then certificates button. I've tried exporting this certificate and then re-imported it as a system certificate using the keytool. But this doesn't appear to make a difference.

I also found a webpage where it discusses granting permissions to signed code or coming from a URL, so I've added:

grant codebase "mydomain.com" {
permission java.security.AllPermission;
}

or

grant signedBy "Publisher in dialog box" {
permission java.security.AllPermission;
}

to the java.policy file, again, the dialog box still appears..grrrrr :confused:

[Norm]

What is the applet doing that it needs permission?

Can the design be changed?