🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.lang.java
Article #522

Re: Signing Java2 applets

#522
From: Oleg Konovalov
Date: Fri, 15 Dec 2000 21:13
66 lines
3583 bytes
When I signed it with signtool 1.1 (not 1.3), it fixed a problem.
But now the problem is that it works coorectly (Grant dialog, no yellow
bar, etc.)
only on SOME PCs and not even one workstation (Solaris 2.6).

Someone suggested to install IE5.X on NT4SP6 on those PCs
where it does not work, but that looks very weird to me.
And what would you do on Solaris ?

Please help !

Oleg.



Oleg Konovalov wrote:

> Hi,
>
> I am trying to sign JDK1.2.2 applet with signtool 1.3 on Solaris 2.6
> with Verisign certificate.
> Seems to sign OK, doesn't complain at verification.
>
> but there are some problems with that:
> - still see yellow stripe "Warning: applet window";
> - it never prompts to grant privileges;
> - throws exceptions at copy-paste;
> - usually crashes at printing (on NT) or (on Solaris2.6) creates huge
> (2GB) files and
> goes through infinite (or very long) loop trying to print GIFs (graphic
> buttons)
> and prints a gray page at best.
>
> All that tells me that it is not signed correctly or Java plug-in
> doesn't treat
> it as signed.
>
> Here is how I sign it (works fine with JDK1.1.7A in Netscape JavaVM):
>  signtool -p"mypwd"  -k"my certificate name"
> -d"/export/home/dbasii/.netscape"
> -Z  Signed${JARFILE} $SIGN_DIR  >>  /tmp/webLog$$
> Does it look OK for you ?
>
> 1) Are you sure signtool allows to sign Java2 applets (which run with
> Java Plug-in) ?
>
> 2) I have imported certificate to the Netscape. Do I have to do
> something else
> (for Java Plug-in) ?
>
> 3) I have also tried to generate a certificate and sign with it, but
> getting exception:
> SecurityException: cannot verify signature block file META-INF/ZIGBERT
> Any ideas ?
>
> 4) I have tried to use jarsigner, but it always throws exception
> ZipException: invalid entry compressed size (expected <X> but got <X-3>
> bytes)
> (different entries for different applets).
>
> Any suggestions ?
>
> Thank you in advance,
> Oleg.
>
> P.S.: Please reply via e-mail also.
Technical Details
Message-ID: <3A3A898E.6F90FEB7@telcordia.com>
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!supernews.com!isdnet!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!newsfeed.mathworks.com!news-out.cwix.com!newsfeed.cwix.com!pullfeed!froot.cc.bellcore.com!128.96.172.43
References: <3A38FE68.ADCECA60@telcordia.com>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 10224f,1211f42a0ec8e853
X-Google-Attributes: gid10224f,public
X-Google-Thread: f5d71,1211f42a0ec8e853
X-Google-Attributes: gidf5d71,public
X-Google-Thread: 115d3b,1211f42a0ec8e853
X-Google-Attributes: gid115d3b,public
X-Google-Thread: ff01d,1211f42a0ec8e853
X-Google-Attributes: gidff01d,public
X-Google-Thread: f5e83,1211f42a0ec8e853
X-Google-Attributes: gidf5e83,public
X-Google-Thread: 10fd6d,1211f42a0ec8e853
X-Google-Attributes: gid10fd6d,public
X-Google-Thread: 113ae9,1211f42a0ec8e853
X-Google-Attributes: gid113ae9,public
X-Google-ArrivalTime: 2000-12-15 13:25:56 PST
Message-ID: <3A3A898E.6F90FEB7@telcordia.com>
Date: Fri, 15 Dec 2000 16:13:50 -0500
From: Oleg Konovalov <okonoval@telcordia.com>
X-Mailer: Mozilla 4.7 [en] (WinNT; U)
X-Accept-Language: en
MIME-Version: 1.0
Newsgroups: comp.lang.java,comp.lang.java.help,comp.lang.java.security,comp.lang.java.softwaretools,borland.public.jbuilder.applet-issues,alt.netscape,comp.lang.java.gui
To: Oleg Konovalov <okonoval@telcordia.com>
Subject: Re: Signing Java2 applets
References: <3A38FE68.ADCECA60@telcordia.com>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
NNTP-Posting-Host: 128.96.172.43
X-Trace: 15 Dec 2000 16:13:52 -0500, 128.96.172.43
Lines: 67
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!supernews.com!isdnet!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!newsfeed.mathworks.com!news-out.cwix.com!newsfeed.cwix.com!pullfeed!froot.cc.bellcore.com!128.96.172.43