AppletTalk.com Forum Index AppletTalk.com
Java discussions newsgroups
 
Archives   FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

Signing webstart with 1.5

 
Post new topic   Reply to topic    AppletTalk.com Forum Index -> Security and Java
View previous topic :: View next topic  
Author Message
Guest






PostPosted: Tue Aug 15, 2006 9:17 pm    Post subject: Signing webstart with 1.5 Reply with quote



I am signing a jar that I am deploying with webstart. When I click on
the link, the application loads, then dies without ever prompting me if
I trust the certificate or not. I looked at the console output, and the
application stopped because of a security exception. That is what I
would expect if the jar wasn't signed.

Quote:
I used keytool to create a keystore on my local machine.
Signed the jar.
Pushed the jar to the webserver.
Attempted to start it.

I've found some messages regarding the need to get a proper certificate
in Java 1.5, but not being a security person, it wasn't clear to me
what certificate the person was talking about, or how to go about
getting one. (I assume I don't have to go to verisign to test an app?).
Back to top
Guest






PostPosted: Wed Aug 16, 2006 10:13 pm    Post subject: Re: Signing webstart with 1.5 Reply with quote



Nevermind,

The answer was that the <security> tag information had to be placed
before the <information> tag information. I think this is a work around
to an unusual bug. I posted it on sun. Perhaps they will agree with me,
or they will not. The behavior is different than 1.4.


doug.descombaz (AT) gmail (DOT) com wrote:
Quote:
I am signing a jar that I am deploying with webstart. When I click on
the link, the application loads, then dies without ever prompting me if
I trust the certificate or not. I looked at the console output, and the
application stopped because of a security exception. That is what I
would expect if the jar wasn't signed.

I used keytool to create a keystore on my local machine.
Signed the jar.
Pushed the jar to the webserver.
Attempted to start it.

I've found some messages regarding the need to get a proper certificate
in Java 1.5, but not being a security person, it wasn't clear to me
what certificate the person was talking about, or how to go about
getting one. (I assume I don't have to go to verisign to test an app?).
Back to top
Display posts from previous:   
Post new topic   Reply to topic    AppletTalk.com Forum Index -> Security and Java All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2006 phpBB Group
SEO toolkit © 2004-2006 webmedic.