Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8035449

security prompt is shown twice when 'Do not show' checkbox is checked

    XMLWordPrintable

    Details

    • Subcomponent:
    • Resolved In Build:
      b01
    • CPU:
      x86
    • OS:
      windows_7
    • Verification:
      Verified

      Backports

        Description


        J2SE Version (please include all output from java -version flag):
        java version "1.7.0_55"
        Java(TM) SE Runtime Environment (build 1.7.0_55-b08)
        Java HotSpot(TM) Client VM (build 24.55-b01, mixed mode, sharing)
        AND
        java version "1.8.0_05"
        Java(TM) SE Runtime Environment (build 1.8.0_05-b07)
        Java HotSpot(TM) Client VM (build 25.5-b01, mixed mode)


        Does this problem occur on J2SE 7ux? Yes / No (pick one)
        Yes


        Operating System Configuration Information (be specific):
        Windows 7 (32/64bit), Ubuntu 12.04 (32bit) and Ubuntu 13.20 (64bit). But appears to be a global issue.


        Hardware Configuration Information (be specific):
        Virtual machines


        Bug Description:
        We have observed that the java security prompt is shown twice, if the checkbox "Do not show this again for apps from the publisher and location above" is checked.
        If the checkbox is not marked the message is only shown once.

        In our setup we have one central server hosting a login applet (server A), and many service providers each with their own server hosting the actual websites (servers B, C, D ...).

        Server B (and C, D, E, ...) presents the applet from server A to the end user (client).

        Our manifest attributes look like this:
        Manifest-Version: 1.0
        Ant-Version: Apache Ant 1.7.1
        Created-By: 1.5.0_22-b03 (Sun Microsystems Inc.)
        Trusted-Only: true
        Sealed: true
        Built-By: Administrator
        Target-Environment: prod
        Caller-Allowable-Codebase: *
        Application-Library-Allowable-Codebase: *
        Vendor: DanID
        Title: Digital Signatur
        Version: 1.0
        Build: DEVELOPMENT BUILD 2013-10-29 12.17.23
        Permissions: all-permissions
        Codebase: *
        Application-Name: NemID

        We do not see the problem when loading the signed applet from https://www.java.com/en/download/installed.jsp.


        Steps to Reproduce (be specific):
        Prerequisites: Access to a signed applet on a setup where the applet is hosted on an other webserver then the webpage including the applet (for example: https://www.nemid.nu/dk-da/#log_paa_selvbetjening).
        1) The signed applet used in this test should not have been accepted with "Do not show this again" checked on the acceptance screen previously.
        2) Load the signed applet. The acceptance of signed applet screen is shown.
        3) Check the checkbox "Do not show this again".
        4) Press "Run".
        5) The acceptance of signed applet screen is shown again.

        Priority justification:
        ILW = MMM => P3

          Attachments

            Issue Links

              Activity

                People

                Assignee:
                dtitov Daniil Titov (Inactive)
                Reporter:
                tyao Ting-Yun Ingrid Yao (Inactive)
                Votes:
                0 Vote for this issue
                Watchers:
                7 Start watching this issue

                  Dates

                  Created:
                  Updated:
                  Resolved: