Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-4389438

JaWS allows trusted environment permissions for unsigned applications

    Details

    • Type: Bug
    • Status: Closed
    • Priority: P2
    • Resolution: Fixed
    • Affects Version/s: 1.0
    • Fix Version/s: 1.0
    • Component/s: deploy
    • Labels:
    • Subcomponent:
    • Resolved In Build:
      1.0
    • CPU:
      sparc
    • OS:
      solaris_7
    • Verification:
      Verified

      Description



      Name: dfR10049 Date: 11/15/2000



      JNLP spec states:

         The following requirements must be satisfied before a JNLP Client can grant
         an application these access rights:

         1. The application is signed.

         2. The user and/or the JNLP Client trusts the certificate that is used to sign
         the application.

      But if some requested jars are unsigned or jars are signed with different certificates
      JNLP client is running in a trusted environment in spite of this.

      Example of .jnlp file where 3 jar files are requested:

      allPerm.jar \ signed with different certificates
      classes.jar /
      unsigned.jar - unsigned jar


      <?xml version="1.0" encoding="UTF-8"?>
      <jnlp spec="0.2+"
        codebase="http://localhost:12345/">
        <information>
          <title>Trusted Environment test</title>
          <vendor>Sun Microsystems, Inc.</vendor>
          <homepage href="index.html"/>
        </information>
        <resources>
          <j2se version="1.3 1.2"/>
          <jar href="allPerm.jar"/>
          <jar href="classes.jar"/>
          <jar href="unsigned.jar"/>
        </resources>
        <security>
          <all-permissions/>
        </security>
        <application-desc main-class="MyClass">
        </application-desc>

      </jnlp>

      ======================================================================

        Attachments

          Activity

            People

            • Assignee:
              rschmidtsunw Rene Schmidt (Inactive)
              Reporter:
              fdasunw Fda Fda (Inactive)
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:
                Imported:
                Indexed: