Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8027821

For signed jars without manifest "Permissions", there is still security warning dialog before Application Error (Or blocked) Dialog.

    Details

    • Resolved In Build:
      b01

      Backports

        Description

        Steps to reproduce:
        1. Install the latest 8 nightly (#645) on win7-x86
        2. import this cert to deployment Signer CA store so our apps will be regarded as valid CA-Signed: http://sqe-hgi.us.oracle.com/hg/index.cgi/8/deployment_int_ws/raw-file/5fe827854bc1/new_framework/lib/keyStore/valid_selfsigned_100year_keystore.cert
        3. access http://sqeweb.us.oracle.com/net/sqenfs-1/export1/comp/jsn/users/stephen/deployment_stuff/do.NOT.remove.me/bugs/lc_sqe_links/liveconnect/html/test_JS2SJ_Sandbox.html
        4. Note the main jar MixedCodeAppletTLCAC.jar is missing manifest "Permissions"
        5. If you see security warning dialog asking for if you want to "Run", then the issue is reproduced.

        Expected:
        The app should be directly blocked because of JDK-8025098.

        Also:
        1. the security warning dialog contains yellow warning saying that the jar missing manifest "Permissions" and will be blocked in a "future" JRE
        2. after you click "Run", the apps will abort with error in trace:
        ========
        Missing Application-Name manifest attribute for: http://localhost:8080/liveconnect/classes/MixedCodeAppletTLCAC.jar
        ========

        So actually #1 and #2 contradict each other.

          Attachments

            Issue Links

              Activity

                People

                • Assignee:
                  herrick Andy Herrick
                  Reporter:
                  stephenh Stephen Hu (Inactive)
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  11 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved: