Article View: comp.lang.java
Article #522Re: Signing Java2 applets
From: Oleg Konovalov
Date: Fri, 15 Dec 2000 21:13
Date: Fri, 15 Dec 2000 21:13
66 lines
3583 bytes
3583 bytes
When I signed it with signtool 1.1 (not 1.3), it fixed a problem.
But now the problem is that it works coorectly (Grant dialog, no yellow
bar, etc.)
only on SOME PCs and not even one workstation (Solaris 2.6).
Someone suggested to install IE5.X on NT4SP6 on those PCs
where it does not work, but that looks very weird to me.
And what would you do on Solaris ?
Please help !
Oleg.
Oleg Konovalov wrote:
> Hi,
>
> I am trying to sign JDK1.2.2 applet with signtool 1.3 on Solaris 2.6
> with Verisign certificate.
> Seems to sign OK, doesn't complain at verification.
>
> but there are some problems with that:
> - still see yellow stripe "Warning: applet window";
> - it never prompts to grant privileges;
> - throws exceptions at copy-paste;
> - usually crashes at printing (on NT) or (on Solaris2.6) creates huge
> (2GB) files and
> goes through infinite (or very long) loop trying to print GIFs (graphic
> buttons)
> and prints a gray page at best.
>
> All that tells me that it is not signed correctly or Java plug-in
> doesn't treat
> it as signed.
>
> Here is how I sign it (works fine with JDK1.1.7A in Netscape JavaVM):
> signtool -p"mypwd" -k"my certificate name"
> -d"/export/home/dbasii/.netscape"
> -Z Signed${JARFILE} $SIGN_DIR >> /tmp/webLog$$
> Does it look OK for you ?
>
> 1) Are you sure signtool allows to sign Java2 applets (which run with
> Java Plug-in) ?
>
> 2) I have imported certificate to the Netscape. Do I have to do
> something else
> (for Java Plug-in) ?
>
> 3) I have also tried to generate a certificate and sign with it, but
> getting exception:
> SecurityException: cannot verify signature block file META-INF/ZIGBERT
> Any ideas ?
>
> 4) I have tried to use jarsigner, but it always throws exception
> ZipException: invalid entry compressed size (expected <X> but got <X-3>
> bytes)
> (different entries for different applets).
>
> Any suggestions ?
>
> Thank you in advance,
> Oleg.
>
> P.S.: Please reply via e-mail also.
Technical Details
Message-ID:
<3A3A898E.6F90FEB7@telcordia.com>Path:
arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!supernews.com!isdnet!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!newsfeed.mathworks.com!news-out.cwix.com!newsfeed.cwix.com!pullfeed!froot.cc.bellcore.com!128.96.172.43References:
<3A38FE68.ADCECA60@telcordia.com>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 10224f,1211f42a0ec8e853 X-Google-Attributes: gid10224f,public X-Google-Thread: f5d71,1211f42a0ec8e853 X-Google-Attributes: gidf5d71,public X-Google-Thread: 115d3b,1211f42a0ec8e853 X-Google-Attributes: gid115d3b,public X-Google-Thread: ff01d,1211f42a0ec8e853 X-Google-Attributes: gidff01d,public X-Google-Thread: f5e83,1211f42a0ec8e853 X-Google-Attributes: gidf5e83,public X-Google-Thread: 10fd6d,1211f42a0ec8e853 X-Google-Attributes: gid10fd6d,public X-Google-Thread: 113ae9,1211f42a0ec8e853 X-Google-Attributes: gid113ae9,public X-Google-ArrivalTime: 2000-12-15 13:25:56 PST Message-ID: <3A3A898E.6F90FEB7@telcordia.com> Date: Fri, 15 Dec 2000 16:13:50 -0500 From: Oleg Konovalov <okonoval@telcordia.com> X-Mailer: Mozilla 4.7 [en] (WinNT; U) X-Accept-Language: en MIME-Version: 1.0 Newsgroups: comp.lang.java,comp.lang.java.help,comp.lang.java.security,comp.lang.java.softwaretools,borland.public.jbuilder.applet-issues,alt.netscape,comp.lang.java.gui To: Oleg Konovalov <okonoval@telcordia.com> Subject: Re: Signing Java2 applets References: <3A38FE68.ADCECA60@telcordia.com> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit NNTP-Posting-Host: 128.96.172.43 X-Trace: 15 Dec 2000 16:13:52 -0500, 128.96.172.43 Lines: 67 Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!supernews.com!isdnet!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!newsfeed.mathworks.com!news-out.cwix.com!newsfeed.cwix.com!pullfeed!froot.cc.bellcore.com!128.96.172.43