Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8009846

String for always accept does not match meaning of always in signed sandbox security dialog.

    Details

    • Resolved In Build:
      b82
    • Verification:
      Verified

      Backports

        Description

        Testing env: 32bit winxp, jre 8 nightly bundle #613

        Steps to reproduce:
        - launch app http://rehte.cn.oracle.com:8080/wshost/new_framework/new_framework/tests/javafx/manual/Preloader/html/SignedHelloPreloaderSandbox1.jnlp
        - There is a security dialog
        - Click "I accept... " and "Do not show..." checkbox on the dialog
        - Click Run button
        - Close the app
        - Launch another app http://rehte.cn.oracle.com:8080/wshost/new_framework/new_framework/tests/javafx/manual/Preloader/html/SignedHelloPreloaderSandbox2.jnlp
        The 2 apps have different href in jnlp file, so they should be considered to be different applications.
        - If there is no security dialog for the second app, bug is reproduced.

        Source code location:
        http://rehte.cn.oracle.com:8080/wshost/new_framework/new_framework/tests/javafx/manual/Preloader/src

        The behavior described above is correct. The meaning of always recently changed from "always for anything signed by this certificate" to "anything from this host signed by this certificate", but this text was wrong even before that, saying specifically "Do not show this again for this app".

        The String used for signed all-permission apps, "security.dialog.always" was properly changed to :
        "&Do not show this again for apps from the publisher and location above"
        but the value of "sandbox.security.dialog.always" did not change. It needs to - or it needs to be just removed, and the code referencing it in both DialogTemplate.java and JavaFX equivalent needs to be modified to just use the same always string for sandbox signed certificate dialog as for normal certificate dialog.
        The later solution would not need additional translations though it requires changing both Java and JavaFX code.

          Attachments

            Issue Links

              Activity

                People

                • Assignee:
                  mhowe Mark Howe (Inactive)
                  Reporter:
                  qgong Fred Gong (Inactive)
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  5 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved: