Article View: comp.lang.java
Article #521Signing Java2 applets
From: Oleg Konovalov
Date: Thu, 14 Dec 2000 17:07
Date: Thu, 14 Dec 2000 17:07
54 lines
3024 bytes
3024 bytes
Hi,
I am trying to sign JDK1.2.2 applet with signtool 1.3 on Solaris 2.6
with Verisign certificate.
Seems to sign OK, doesn't complain at verification.
but there are some problems with that:
- still see yellow stripe "Warning: applet window";
- it never prompts to grant privileges;
- throws exceptions at copy-paste;
- usually crashes at printing (on NT) or (on Solaris2.6) creates huge
(2GB) files and
goes through infinite (or very long) loop trying to print GIFs (graphic
buttons)
and prints a gray page at best.
All that tells me that it is not signed correctly or Java plug-in
doesn't treat
it as signed.
Here is how I sign it (works fine with JDK1.1.7A in Netscape JavaVM):
signtool -p"mypwd" -k"my certificate name"
-d"/export/home/dbasii/.netscape"
-Z Signed${JARFILE} $SIGN_DIR >> /tmp/webLog$$
Does it look OK for you ?
1) Are you sure signtool allows to sign Java2 applets (which run with
Java Plug-in) ?
2) I have imported certificate to the Netscape. Do I have to do
something else
(for Java Plug-in) ?
3) I have also tried to generate a certificate and sign with it, but
getting exception:
SecurityException: cannot verify signature block file META-INF/ZIGBERT
Any ideas ?
4) I have tried to use jarsigner, but it always throws exception
ZipException: invalid entry compressed size (expected <X> but got <X-3>
bytes)
(different entries for different applets).
Any suggestions ?
Thank you in advance,
Oleg.
P.S.: Please reply via e-mail also.
Technical Details
Message-ID:
<3A38FE68.ADCECA60@telcordia.com>Path:
arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!supernews.com!216.227.56.88.MISMATCH!telocity-west!TELOCITY!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!newsfeed.cwix.com!pullfeed!froot.cc.bellcore.com!128.96.172.43Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 10224f,1211f42a0ec8e853,start X-Google-Attributes: gid10224f,public X-Google-Thread: 115d3b,1211f42a0ec8e853,start X-Google-Attributes: gid115d3b,public X-Google-Thread: f5e83,1211f42a0ec8e853,start X-Google-Attributes: gidf5e83,public X-Google-Thread: 113ae9,1211f42a0ec8e853,start X-Google-Attributes: gid113ae9,public X-Google-Thread: 10fd6d,1211f42a0ec8e853,start X-Google-Attributes: gid10fd6d,public X-Google-Thread: ff01d,1211f42a0ec8e853,start X-Google-Attributes: gidff01d,public X-Google-Thread: f5d71,1211f42a0ec8e853,start X-Google-Attributes: gidf5d71,public X-Google-ArrivalTime: 2000-12-14 09:12:07 PST Message-ID: <3A38FE68.ADCECA60@telcordia.com> Date: Thu, 14 Dec 2000 12:07:52 -0500 From: Oleg Konovalov <okonoval@telcordia.com> X-Mailer: Mozilla 4.7 [en] (WinNT; U) X-Accept-Language: en MIME-Version: 1.0 Newsgroups: comp.lang.java,comp.lang.java.help,comp.lang.java.security,comp.lang.java.softwaretools,borland.public.jbuilder.applet-issues,alt.netscape,comp.lang.java.gui Subject: Signing Java2 applets Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit NNTP-Posting-Host: 128.96.172.43 X-Trace: 14 Dec 2000 12:07:53 -0500, 128.96.172.43 Lines: 55 Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!supernews.com!216.227.56.88.MISMATCH!telocity-west!TELOCITY!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!newsfeed.cwix.com!pullfeed!froot.cc.bellcore.com!128.96.172.43