🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.lang.java
Article #519

Re: Signing Java2 applets

#519
From: Keene Hammond
Date: Mon, 25 Dec 2000 02:15
76 lines
4395 bytes
I have successfully signed many applets granting them universal connect.
There are two thing you should consider;
1. The code signing certificates from verisign are browser specific; for
Internet Explorer or for Netscape not either or.
2. When you grant the "privilege" it is only valid in that context and it
goes out of scope and the "privilege" is lost.
Keene Hammond
"Oleg Konovalov" <okonoval@telcordia.com> wrote in message
news:3A3A898E.6F90FEB7@telcordia.com...
> When I signed it with signtool 1.1 (not 1.3), it fixed a problem.
> But now the problem is that it works coorectly (Grant dialog, no yellow
> bar, etc.)
> only on SOME PCs and not even one workstation (Solaris 2.6).
>
> Someone suggested to install IE5.X on NT4SP6 on those PCs
> where it does not work, but that looks very weird to me.
> And what would you do on Solaris ?
>
> Please help !
>
> Oleg.
>
>
>
> Oleg Konovalov wrote:
>
> > Hi,
> >
> > I am trying to sign JDK1.2.2 applet with signtool 1.3 on Solaris 2.6
> > with Verisign certificate.
> > Seems to sign OK, doesn't complain at verification.
> >
> > but there are some problems with that:
> > - still see yellow stripe "Warning: applet window";
> > - it never prompts to grant privileges;
> > - throws exceptions at copy-paste;
> > - usually crashes at printing (on NT) or (on Solaris2.6) creates huge
> > (2GB) files and
> > goes through infinite (or very long) loop trying to print GIFs (graphic
> > buttons)
> > and prints a gray page at best.
> >
> > All that tells me that it is not signed correctly or Java plug-in
> > doesn't treat
> > it as signed.
> >
> > Here is how I sign it (works fine with JDK1.1.7A in Netscape JavaVM):
> >  signtool -p"mypwd"  -k"my certificate name"
> > -d"/export/home/dbasii/.netscape"
> > -Z  Signed${JARFILE} $SIGN_DIR  >>  /tmp/webLog$$
> > Does it look OK for you ?
> >
> > 1) Are you sure signtool allows to sign Java2 applets (which run with
> > Java Plug-in) ?
> >
> > 2) I have imported certificate to the Netscape. Do I have to do
> > something else
> > (for Java Plug-in) ?
> >
> > 3) I have also tried to generate a certificate and sign with it, but
> > getting exception:
> > SecurityException: cannot verify signature block file META-INF/ZIGBERT
> > Any ideas ?
> >
> > 4) I have tried to use jarsigner, but it always throws exception
> > ZipException: invalid entry compressed size (expected <X> but got <X-3>
> > bytes)
> > (different entries for different applets).
> >
> > Any suggestions ?
> >
> > Thank you in advance,
> > Oleg.
> >
> > P.S.: Please reply via e-mail also.
>
Technical Details
Message-ID: <n5y16.53064$7I.6048734@typhoon.nyroc.rr.com>
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!supernews.com!isdnet!209.249.123.233.MISMATCH!xfer10.netnews.com!netnews.com!newsfeed.skycache.com!Cidera!cyclone-0.nyroc.rr.com!cyclone-out.nyroc.rr.com!typhoon.nyroc.rr.com.POSTED!not-for-mail
References: <3A38FE68.ADCECA60@telcordia.com> <3A3A898E.6F90FEB7@telcordia.com>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 10224f,1211f42a0ec8e853
X-Google-Attributes: gid10224f,public
X-Google-Thread: 113ae9,1211f42a0ec8e853
X-Google-Attributes: gid113ae9,public
X-Google-Thread: f5d71,1211f42a0ec8e853
X-Google-Attributes: gidf5d71,public
X-Google-Thread: 10fd6d,1211f42a0ec8e853
X-Google-Attributes: gid10fd6d,public
X-Google-Thread: ff01d,1211f42a0ec8e853
X-Google-Attributes: gidff01d,public
X-Google-Thread: f5e83,1211f42a0ec8e853
X-Google-Attributes: gidf5e83,public
X-Google-Thread: 115d3b,1211f42a0ec8e853
X-Google-Attributes: gid115d3b,public
X-Google-ArrivalTime: 2000-12-24 18:19:53 PST
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!supernews.com!isdnet!209.249.123.233.MISMATCH!xfer10.netnews.com!netnews.com!newsfeed.skycache.com!Cidera!cyclone-0.nyroc.rr.com!cyclone-out.nyroc.rr.com!typhoon.nyroc.rr.com.POSTED!not-for-mail
From: "Keene Hammond" <khammon1@rochester.rr.com>
Newsgroups: comp.lang.java,comp.lang.java.help,comp.lang.java.security,comp.lang.java.softwaretools,borland.public.jbuilder.applet-issues,alt.netscape,comp.lang.java.gui
References: <3A38FE68.ADCECA60@telcordia.com> <3A3A898E.6F90FEB7@telcordia.com>
Subject: Re: Signing Java2 applets
Lines: 78
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 5.50.4133.2400
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
Message-ID: <n5y16.53064$7I.6048734@typhoon.nyroc.rr.com>
Date: Mon, 25 Dec 2000 02:15:47 GMT
NNTP-Posting-Host: 24.169.199.124
X-Complaints-To: abuse@rochester.rr.com
X-Trace: typhoon.nyroc.rr.com 977710547 24.169.199.124 (Sun, 24 Dec 2000 21:15:47 EST)
NNTP-Posting-Date: Sun, 24 Dec 2000 21:15:47 EST
Organization: Time Warner Road Runner - Rochester NY