Dept of Homeland Security Warning re Java

Should I disable Java?

Graham Perrin wrote:
… the latest exploit affects all versions of Java.
No. That's incorrect.
Please follow the link given in my first post.
There was disagreement between two government agencies and several testers all weekend over whether Java 4 through 6 was involved or not, but today they decided to take Oracle's word for it that it is only Java 7.
Now the issue is whether or not everything is fixed. See http://www.kb.cert.org/vuls/id/625617 and http://immunityproducts.blogspot.ca/2013/01/confirmed-java-only-fixed-one-of-two .html.
Bottom line: "Unless it is absolutely necessary to run Java in web browsers, disable it as described below, even after updating to 7u11."

Similar Messages

What about Homeland Security warning about Java?

How does one disable Java from Oracle, and what will that do to operation of the Mac?

You turn off the Java plugin in the web browsers. See:
https://krebsonsecurity.com/how-to-unplug-java-from-the-browser/
Operating of the Mac itself will not be affected at all. The only consequence will be an inability to use any web site that requires Java to function unless you re-enable it.
Regards.

Disable Java Security Warning: Allow access to the following application from this web site?

Dear all,
When I open web intelligence with BI launchpad, this warning has been shown:
"The web site is requesting access and control of the Java application shown above. Allow access only if you trust the web site and know that the application is intended to run on this site.
Allow access to the following application from this web site?"
and it has just three button of "Yes", "No" and "Help".
I go to Java Control Panel and Security tab, then set security level on the "Medium" and add my site in the Exception Site List but this warning is shown each time I open web intelligence.
I have searched the internet very much but I haven't found any solutions for disabling of it. How can I disable this security warning?
Java version 7 update 67
windows XP
SAP BusinessObject BI Platform 4.1 Support Pack 4 Patch 2
best regards,

Hello,
We have the same issue with BI4.1 SP3 FP3.
Can anyone help us ?
Nawale.

How to disable Java Security Warning

Hello Friends
I am running different versions of JRE on a machine due to specific application exigencies.
However I noticed that when entering on the application using the lower JRE Version,the following warning message is being obtained.
The application requires an earlier version of Java.Do you want to continue.
I have searched on the net..and someone advised to disable next generation Java Plug in.Apparently it solves the issue.
But I see several advantages we get by enabling this option.Can we disable it or any other way..I can avoid seeing this warning message.
Regards
Kam.

Hi Stuart,
in Security Warning is text "The certificate used to identify this application has expired". When selected "More Information" -> "View Certificate Details" an certificate for SAP America Inc is visible. Validity of certificate is:
[From: Thu Sep 12 03:00:00 EEST 2013,
To: Fri May 30 02:59:59 EEST 2014]
When I open Router Maintenance in another SAP ME installation validity of certificate is:
[From: Thu May 27 03:00:00 EEST 2010,
To: Sun May 27 02:59:59 EEST 2012]
Where this certificate is located in application server? Is it in code of SAP ME in application server?
Is it not possible to renew certificate?`
Regards,
- Jukka

Importing fdf with js always get security warning

Hi, I have a form with some options (1 category as text with drop down and 5 radio button). The selection get the name of the fdf file to import. On import I get every time the security warning. I select the "Remember this action..." and I click "Allow". In the Settings/Security (Enhanced) the path and the file doesn't appear, so I set it manually, but I still get the security warning everytime. Files are stored locally in a different partion as the system. This happens on 2 machines (Mac 10.7, Mac10.8, Acrobat X, ACrobat XI, Reader XI).
this is the script
var A = "/Volumes/Data_Sharing/Projects/.../.../.../";
var B = getField("Category").valueAsString;
var C = "-okom-data.fdf";
var D = A + B + C;
var E = this.getField("Text1");
E.value = D;
this.importAnFDF(D);
The field Text1 is only a string visualisation for controlling
If I set an Import Data Event without js I don't have any security warning with fdf (but always with xfdf, xml and text files).
If you know what I miss, thanks for any suggestion
Curzio

Unfortunately i dont think its possible.
You'd think a deployment could restrict warnings for a local intranet, or have an exception list.
There was another answer i did see but i would not recommend this at all. Even the person who put the post up does not recommend it.
http://forums.sun.com/thread.jspa?threadID=5253971
You have two options, do not have java 1.6 on the desktop as this is the version that brings up the security warning. Or you can try the new
application with java 1.6 (As long as all functionality is tested). This will satisfy your new app, but not the applications that run of the older
java runtime environments. (we are going to test the application under 1.6 even though its not a supported certification by the vendor.)

Security warning in Plugin 1.4.0 during HTTPS applet download

Hi,
I develop a simple applet, which is unsigned beause doens't do critical operation like read or write on client File Systen. But I download it from an HTTPS web server and the certificate installed in the server is created by GlobalSign.
In Plugin 1.3 and previous release, I could download and run my applet from a HTTP or HTTPS site without problem.
In the Plugin 1.4 BEFORE i download my applet, a security warning popup appears, and it inform me that i try to install a "untrusted" cerfificate for HTTPS comunication.
I known that in Java Plugin 1.3 HTTPS connection are managed by Browser and for example in IE the GlobalSign CA certificate is trust, but in Java Plugin 1.4 itself manage the HTTPS connection, and the GlobalSign CA certificate is not present in the default CA trusted certificates.
My costumer is not very "happy" that his costumer see this security warning when download my applet...
So, the question: is it possible to avoid this message in the default plugin 1.4 configuration?
If this is not possible I must use a CA certificate which is trust for Java Plugin, abandoning the GlobalSign certificate.
Best regards
Michele

Here is perhaps a related problem. In IE6 I go to an https mode along with a basic authentication to view a series of private webpages. When I reach the webpage with my applet, I have to autheticate the applet before proceeding. Is the way the Sun Plugin should work? I know the Sun Plugin uses the IE API for server transactions, but in the case of an applet, it must start a new (basic authentication) instance. After the first authentication of the applet, all other applets down the line do not require a username and password.

App.opendoc does not display security warning window like e.g. "open a file" function?

When I link from one PDF to the other via "open a file" function (both PDFs are located in %userprofile%/mydocuments directory), Reader X and XI open a security warning box. If I agree to open the target file, this specific file always opens without displaying the warning again.
When I link to the same file via app.opendoc, the security warning box does not open. So I do not get a chance to add the target file to the list of trusted files.
Is there any way to motivate app.opendoc to display security warning boxes due to the new sandboxing technology in Reader >= X? So that I get a chance to add the target PDF to the trusted PDFs?

Is there any chance that the application is being run from Developer Suite? In other words, is Developer Suite installed on the client machine and hosting the app?
Regardless, although anything is possible, I have never heard of what you are describing. In all cases, the dialog box should be the java dialog which is a grayish/purple color. The exact color will vary depending on the JRE version you are using.
If my first point is not the case, I would recommend that you consider using WebUtil 10.1.2.2 and also patch the AS environment to the same version. To get WebUtil to 10.1.2.2, you will need to patch a Developer Suite home and copy frmwebutil.jar to the AS home. After patching, I believe you will also find an updated webutil.pll in the DevSuite \forms directory which will also need to be copied then compiled on the deployment server.
Also, ensure that you are using Jinitiator 1.3.1.26 or newer. If you are using the Sun JRE, be sure you are using a certified/supported version. For example, you can use the latest 1.5.x Sun JRE with Forms 10.1.2.2, which is 1.5.0_15

Issues with security warning popups in JRE1.5.0_06

Using
Java Plug-in 1.5.0_06
Using JRE version 1.5.0_06 Java HotSpot(TM) Client VM
Browser is Internet Explorer 6.0.2800.1106
Background:
Our web application has 3 different applets on one page, transmitted using https. Due to a variety of factors, the name of the host does not match the name on the certificate, and we can not change that.
Problem:
We get 3 dialog boxes warning us that the names do not match, as usual. However after installing 1.5.0_06 we get 2 different undesirable behaviors:
A ) 1 or 2 of the dialog boxes are empty and small, as if only the window of the dialog box was created, with no components on it. When you resize them, they remain blank (only default background color). They can not be closed.
B) All 3 of the dialog boxes look as they should, but only one of them can be interacted with. Even after we press "Run" on the working dialog box, we are not able to interact with the other two dialog boxes.
The applets causing these security popups are in 2 different frames, and load simultaneously. The popups all appear at the same time .
We consistently see different behaviors on different PCs:
PC I : After 30 tries, it fails once, error B
PC II: After 20 tries, it works once, mostly error A
PC III: 10 tries, Mostly error A. Never worked once. After a reboot (and full cache clears) we get mostly error B. Never works.
If we disable the warnings (in the control panel), the page loads ok, with no errors.
Have anyone experienced this ?

I've experienced similar problem with Java Web Start twice.
Also using JRE version 1.5.0_06 Java HotSpot(TM) Client VM and Browser Internet Explorer 6.0.2800.1106 on Windows XP (Problem was the same with Java 1.4.2)
My application was signed and launched via JNLP. The security warning popup was shown in the windows taskbar, but it was hidden. Using maximize in the taskmanager, I was able to see the dialog but it was blank. The problem was persistent, although I did not try as many times as 20-30 :-)
On both occations the problem occured on multi (3) screen systems, which I suspected to be the problem (Java has historically had some issues regarding multi screen systems), but now I'm not so sure.
Did you find a solution / cause?

PDF form with buttons opens up URL with security warning window

I have a short-lived process that renders PDF form with data merged. The data is in XML format.
The form buttons are assigned URL values when the form is opened. When I click on them,I get a Security warning prompting me to allow/block that site. When I click on 'Allow', I get a window of download statistics of the website that in the URL.
This would be annoying to the end user. How I do I suppress the Security warning window as well as the download statistics window before the PDF is opened ? Can this be done either at the process design, form design stage or using Java APIs ?
Thanks,
Jyothi

I have a short-lived process that renders PDF form with data merged. The data is in XML format.
The form buttons are assigned URL values when the form is opened. When I click on them,I get a Security warning prompting me to allow/block that site. When I click on 'Allow', I get a window of download statistics of the website that in the URL.
This would be annoying to the end user. How I do I suppress the Security warning window as well as the download statistics window before the PDF is opened ? Can this be done either at the process design, form design stage or using Java APIs ?
Thanks,
Jyothi

When i try to run my jsp i get "File Download Security Warning"

Hi,
I have created a jsp file which is called UpdateEmpDetails1.jsp
This jsp file picks up the employee id of the employee and transfers it to the backend servlet called UpdateEmpDetails1.java. The backend servlet looks up the table stored in the database and pulls up all the information stored corresponding to the employee id.Then the servlet stores the information in a session object and forwards it to the UpdateEmpDetails2.jsp
I display the information which has been forwarded by the servlet in the HTML fields of UpdateEmpDetails2.jsp.
Here the manager can also update the information. When he clicks on submit, the second serlvet UpdateEmpDetails2.java which is linked to UpdateEmpDetails2.jsp picks up the updated information and updates the database. The servlet also displays the message "Your information has been updated". But here is the real problem
The session variables are being transferred perfectly to the jsp file UpdateEmpDetails2.jsp.
But when i make any changes to this file and click on submit I get File Download Security Warning. It Says:
File Download Security Warning
Do you want to save this file
Name UpdateEmpDetails2
Type UnknownFileType
From LocalHost
Then I get another file which says
FileDownload
Getting FIle Information
UpdateEmpDetails2 from localhost
Estimated time left
Download to:
Transfer rate:
Close this dialog box when download is complete
I am just simply not able to update the employee information in the database due to this message.

this is what i am trying to do:
my UpdateEmpDetails1.jsp is as follows:
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional //EN">
<html>
<head>
<title>UpdateEmpDetails1.jsp</title>
<link REL=STYLESHEET
HREF="JSP-Styles.css"
TYPE="text/css">
</head>
<body BGCOLOR="lightyellow" text="black">
<h2 align="left"><font color="black">Update Employee Details Page</font></h2>
<form action="UpdateEmpDetails2" Method="Get">
<h2 align="left">Please enter the Employee ID of the employee whose details you want to edit</h2>
<table width=50% align="center">
<tr><td>Employee ID : </td>
     <td><INPUT TYPE="TEXT" name="employeeid"><br></td></tr>
<tr><td><center><INPUT TYPE="SUBMIT" VALUE="SUBMIT"></center></td></tr>
<tr><td><center><INPUT TYPE="RESET" VALUE="RESET"></center></td></tr>
</table>
</form>
</body>
</html>
my update EmpDetails1.java is as follows:
package com.update;
import com.database.*;
import java.io.*;
import java.sql.*;
import javax.servlet.http.*;
import javax.servlet.*;
public class UpdateEmpDetails1 extends HttpServlet
     public void doGet(HttpServletRequest request,HttpServletResponse response)throws ServletException,IOException
          HttpSession session = request.getSession();
          String X = request.getParameter("employeeid");
          System.out.println("Employee ID:" + X);
          //Establishing the jdbc connection
          try
               Database db = new Database();
               Connection con = db.useConnection();
               String query = "Select * from employees where employeeid=?";
               PreparedStatement stat = con.prepareStatement(query);
               System.out.println(stat);
               stat.setString(1,X);
               ResultSet rs = stat.executeQuery();
               while(rs.next())
                    String A = rs.getString("employeeid");
                    String B = rs.getString("firstname");
                    String C = rs.getString("lastname");
                    String D = rs.getString("gender");
                    String E = rs.getString("dateofbirth");
                    String F = rs.getString("address");
                    String G = rs.getString("postalcode");
                    String H = rs.getString("phone");
                    String I = rs.getString("mobile");
                    String J = rs.getString("designation");
                    String K = rs.getString("joindate");
                    String L = rs.getString("leavedate");
                    String M = rs.getString("email");
                    String N = rs.getString("qualification");
                    String O = rs.getString("empstatus");
                         System.out.println("comparison successful");
                         session.setAttribute("employeeid",A);
                         session.setAttribute("firstname", B);
                         session.setAttribute("lastname", C);
                         session.setAttribute("gender", D);
                         session.setAttribute("dateofbirth", E);
                         session.setAttribute("address", F);
                         session.setAttribute("postalcode", G);
                         session.setAttribute("phone", H);
                         session.setAttribute("mobile", I);
                         session.setAttribute("designation", J);
                         session.setAttribute("joindate", K);
                         session.setAttribute("leavedate", L);
                         session.setAttribute("email", M);
                         session.setAttribute("qualification", N);
                         session.setAttribute("empstatus", O);
                         String url="/UpdateEmpDetails2.jsp";
                         RequestDispatcher dis = request.getRequestDispatcher("/UpdateEmpDetails2.jsp");
                         System.out.println("Dispatching" + dis);
                         dis.forward(request, response);
          catch(Exception e)
               System.out.println(e);
my UpdateEmpDetails2.jsp is as follows:
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<head>
<title>UpdateEmpDetails2.jsp</title>
<link REL=STYLESHEET
HREF="JSP-Styles.css"
TYPE="text/css">
</head>
<body BGCOLOR="lightblue" text="black">
<h1 align="center"><font color="black">Update Employee Details Page</font></h1>
<form action="UpdateEmpDetails2" Method="Get">
<table width=50% align="center">
<tr><td>EMPLOYEE ID:</td>
     <td><INPUT TYPE = "HIDDEN" name="employeeid" value=<%=session.getAttribute("employeeid")%> ></td></tr>
<tr><td>FIRST NAME :</td>
     <td><INPUT TYPE = "TEXT" name="firstname" value=<%=session.getAttribute("firstname")%> ></td></tr>
<tr><td>LAST NAME :</td>
     <td><INPUT TYPE = "TEXT" name="lastname" value=<%=session.getAttribute("lastname")%> ><br></td></tr>
<tr><td>GENDER :</td>
     <td><INPUT TYPE = "TEXT" name="gender" value=<%=session.getAttribute("gender")%> ><br></td></tr>
<tr><td>DATE OF BIRTH (IN MM/DD/YYYY FORMAT) :</td>
     <td><INPUT TYPE = "TEXT" name="dateofbirth" value=<%=session.getAttribute("dateofbirth")%> ><br></td><tr>
<tr><td>ADDRESS :</td>
     <td><INPUT TYPE = "TEXT" name="address" value=<%=session.getAttribute("address")%> ><br></td></tr>
<tr><td>POSTALCODE:</td>
     <td><INPUT TYPE = "TEXT" name="postalcode" value=<%=session.getAttribute("postalcode")%>><br></td></tr>
<tr><td>PHONE:</td>
     <td><INPUT TYPE = "TEXT" name="phone" value=<%=session.getAttribute("phone")%> ><br></td></tr>
<tr><td>MOBILE:</td>
     <td><INPUT TYPE = "TEXT" name="mobile" value=<%=session.getAttribute("mobile")%> ><br></td></tr>
<tr><td>DESIGNATION : </td>
<td><INPUT TYPE="TEXT" name="designation" value=<%=session.getAttribute("designation")%> > <br></td></tr>
<tr><td>JOIN DATE:</td>
     <td><INPUT TYPE = "TEXT" name="joindate" value=<%=session.getAttribute("joindate")%> ><br></td></tr>
<tr><td>LEAVE DATE:</td>
     <td><INPUT TYPE = "TEXT" name="leavedate" value=<%=session.getAttribute("leavedate")%> > <br></td></tr>
<tr><td>EMPLOYEE EMAIL:</td>
     <td><INPUT TYPE = "TEXT" name="email" value=<%=session.getAttribute("email")%> ><br></td></tr>
<tr><td>EMPLOYEE QUALIFICATION:</td>
     <td><INPUT TYPE = "TEXT" name="qualification" value=<%=session.getAttribute("qualification")%> > <br></td></tr>
<tr><td>EMPLOYEE STATUS:</td>
     <td><INPUT TYPE = "TEXT" name="empstatus" value=<%=session.getAttribute("empstatus")%> > <br></td></tr>
<tr><td><center><INPUT TYPE="SUBMIT" VALUE="SUBMIT"></center></td></tr>
<tr><td><center><INPUT TYPE="RESET" VALUE="RESET"></center></td></tr>
</table>
</form>
</body>
</html>
my UpdateEmpDetails2.java is as follows:
package com.update;
import java.io.*;
import java.sql.*;
import javax.servlet.http.*;
import javax.servlet.*;
import com.database.*;
public class UpdateEmpDetails2 extends HttpServlet
     public void doGet(HttpServletRequest request,HttpServletResponse response)throws ServletException,IOException
          PrintWriter out = response.getWriter();
          response.setContentType("texthtml");
          String A = request.getParameter("employeeid");
          out.println(A);
          String B = request.getParameter("firstname");
          out.println(B);
          String C = request.getParameter("lastname");
          out.println(C);
          String D = request.getParameter("gender");
          out.println(D);
          String E = request.getParameter("dateofbirth");
          out.println(E);
          String F = request.getParameter("address");
          out.println(F);
          String G = request.getParameter("postalcode");
          out.println(G);
          String H = request.getParameter("phone");
          out.println(H);
          String I = request.getParameter("mobile");
          out.println(I);
          String J = request.getParameter("designation");
          out.println(J);
          String K = request.getParameter("joindate");
          out.println(K);
          String L = request.getParameter("leavedate");
          out.println(L);
          String M = request.getParameter("email");
          out.println(M);
          String N = request.getParameter("qualification");
          out.println(N);
          String O = request.getParameter("empstatus");
          out.println(O);
          try
          Database db = new Database();
          Connection con = db.useConnection();
          String query= "update employees set employeeid=?,firstname=?,lastname=?,gender=?,dateofbirth=?,address=?,postalcode=?,phone=?,mobile=?,designation=?,joindate=?,leavedate=?,email=?,qualification=? where employeeid=?";
          PreparedStatement stat = con.prepareStatement(query);
          stat.setString(1, B);
          stat.setString(2, C);
          stat.setString(3, D);
          stat.setString(4, E);
          stat.setString(5, F);
          stat.setString(6, G);
          stat.setString(7, H);
          stat.setString(8, I);
          stat.setString(9, J);
          stat.setString(10, K);
          stat.setString(11, L);
          stat.setString(12, M);
          stat.setString(13, N);
          stat.setString(14, O);
          stat.setString(15, A);
          System.out.println(stat);
          int i = stat.executeUpdate();
          if (i!= 0)
          System.out.println("The record has been updated");
          else
               System.out.println("Sorry ! failure");
          ResultSet rs = stat.executeQuery("select * from employees");
          System.out.println(rs);
          while(rs.next())
               out.print("<table border='1'>");
               out.println(rs.getString(1) + "<br>");
               out.println(rs.getString(2) + "<br>");
               out.println(rs.getString(3) + "<br>");
               out.println(rs.getString(4) + "<br>");
               out.println(rs.getString(5) + "<br>");
               out.println(rs.getString(6) + "<br>");
               out.println(rs.getString(7) + "<br>");
               out.println(rs.getString(8) + "<br>");
               out.println(rs.getString(9) + "<br>");
               out.println(rs.getString(10) + "<br>");
               out.println(rs.getString(11) + "<br>");
               out.println(rs.getString(12) + "<br>");
               out.println(rs.getString(13) + "<br>");
               out.println(rs.getString(14) + "<br>");
               out.println(rs.getString(15) + "<br>");
               out.print("<br>");
          catch (Exception e)
               System.out.println(e);
               e.printStackTrace();
Now as soon as i click on the submit button of the first jsp i get "File Download security warning message"
I am new to jsp and i am not able to troubleshoot this

Internet Explorer Security Warning Message

Hi am using pure html and am sure not using any active
components in my page.
When i preview in Internet Explorer, though it shows the
page, but in the top it gives a security warning:
To help protect your security, Internet Explorer has
restricted this file from showing active content that could access
your computer. Click here for options.
Someone said the the java script tag is giving the warning,
but even after removing that tag, am getting that warning message
The same page, doesn't give any error or warning when
previewd in Firefox!
Can someone point me where am going wrong in the html code i
writen?
Thanks in advance.
Hammer.
The Code:
----------------

Hi,
My immediate reaction is don't panic! If you are testing your
own page from your own local server then there is nothing to worry
about. The whole issue of Active X controls is another sore point
when having to deal with Microsoft's handling of interactive
content.
Triggering of the warning can be caused by various things
other than the obvious contact with dynamic content. Here is an old
thread from a discussion on why Active X warning appear on your own
pages.
http://www.dreamincode.net/forums/showtopic16624.htm
Googling will find more evidence for you to trace. Your code
looks fine to me and is not a threat to your system if it came off
of your own local server.
Active X is a pain in the butt.
regards
Nick Barling
www.barkingweb.com

JRE 6u19 - security warning   external properties file

Hi,
I have an applet with several jars files, all jars are signed.
Since JRE 6u19, when launching my applet, I have the message "Java has discovered application components that could indicate a security problem".
6u19 has a new security approach for application/applet mixing Signed and Unsigned Code.
http://java.sun.com/javase/6/docs/technotes/guides/jweb/mixed_code.html
Nevertheless, in my case, all jars are signed and I still have the warning message.
I analyzed the code and noticed that the warning comes from the use of a properties file and a 'cacerts' file.
The property file is used through the common class: java.util.Properties
I think also that we have security warnings when using the following methods to get resources :
this.getClass().getClassLoader().getResourceAsStream(fileName)
or java.util.ResourceBundle.getBundle
JRE 6u19 is supposed to verify if the jars are signed (and all my jars are signed) but I don' t understand why I have a security warning when using a properties file.
I would appreciate to get help. thanks.
Regards,
Cédric

I read your reply as: It should work to use the context classloader to load resources from unsigned jars without getting the warning. Is that correct?
Unfortunately, I cannot attach context, so I am going to provide a small sample consisting of a handful of files, that produces a warning for me.
To run the example:
- Correct the codebase in the two jnlp-files
- Compile the java-file, jar it to a jar called webstart.jar and sign the jar.
- Jar the text file to a jar called resource.jar.
- Run the webstart.jnlp.
Main.java:
package com.virtubuild;
import java.io.*;
import java.net.*;
public class Main {
public static void main(String[] args) throws IOException {
    ClassLoader contextClassLoader = Thread.currentThread().getContextClassLoader();
    URL url = contextClassLoader.getResource("resource.txt");
    if(url==null) {
      System.err.println("Could not find external resource");
      return;
    readAndPrint(url);
private static void readAndPrint(URL url) throws IOException {
    BufferedReader in = openFile(url);
    String inputLine = null;
    while ((inputLine = in.readLine()) != null) {
      System.out.println(inputLine);
    in.close();
public static BufferedReader openFile(URL url) throws IOException{
    InputStream input = url.openStream();
    InputStreamReader ireader = new InputStreamReader(input,"UTF8");
    return new BufferedReader(ireader);
webstart.jnlp:
<?xml version="1.0" encoding="UTF-8"?>
<jnlp spec="6.0+" codebase="file:///C:/TEMP/webstart/" href="webstart.jnlp">
<information>
    <title>Webstart</title>
</information>
<security>
    <all-permissions/>
</security>
<update check="always" policy="prompt-update"/>
<resources>
    <java version="1.6+"/>
          <jar href="webstart.jar" main="true"/>
</resources>
<resources>
       <extension href="resource.jnlp"/>
</resources>
<application-desc/>
</jnlp>
resource.txt:
Test
Testing
Tested
resource.jnlp:
<?xml version="1.0" encoding="UTF-8"?>
<jnlp spec="6.0+" codebase="file:///C:/TEMP/webstart/" href="resource.jnlp">
<information>
    <title>Resource</title>
</information>
<update check="always" policy="prompt-update"/>
<resources>
<jar href="resource.jar"/>
</resources>
<component-desc/>
</jnlp>The better way you mention is not really an option for us right now, but we will keep it in mind if we create another product deployed through webstart.

Problem of security warning for self signed JARs

Hello All
I have made a jar file and self signed ( using keytool and jarsigner). Then having attached in a form, I put it in 10g rel 2 Oracle A/S. When accesing in a web browser in LINUX , security warning shows The application's digital signature is invalid. Do you want to continue ?

Hi Kevin
I have the exactly the same requirement as yours....
(1. write a file into client file system, then
2. launch an application to edit this file, then
3. read the edited content from the file).
Plz go thru the following. I signed my applet as follows:-
makecert -sk exec -n "CN=Hemanth" exec.cer
cert2spc exec.cer exec.spc
javac ExecNP.java (ExecNP.java is the applet code. I have given the code of the applet)
cabarc -s 6144 n exec.cab ExecNP.class
setreg 1 true
signcode -j javasign.dll -jp exec.ini -spc exec.spc -k exec exec.cab
chkjava exec.cab
Code of ExecNP.java :-
import com.ms.security.*;
import com.ms.security.permissions.*;
import java.lang.Runtime.*;
public class ExecNP extends java.applet.Applet
public void init()
     try {
          PolicyEngine.assertPermission(PermissionID.EXEC);
          Runtime.getRuntime().exec("c:\\windows\\notepad.exe");
     } catch(Exception e) {
Here is the html code :-
<applet code=ExecNP width=800 height=200> <PARAM NAME='cabbase' VALUE='exec.cab'> </applet>
When I try to open this html file I get the following exception in the Java Console
java.lang.UnsatisfiedLinkError: initPolicyEngine
Please tell me whats wrong.
Hemanth.

Stop security warning

When I login to my.msn.com I get a security warning ref to secure/unsecure data transmission. How do I disable this warning for this site and/or all sites?
Don
Win7 Firefox 3.6.12

That warning comes from the Java plugin when the page runs an unsigned Java applet.
Do you notice anything important missing if you Cancel it?
''If not, you could turn off Java for that site.''
Call up the Page Info dialog. Either:
* right-click and choose View Page Info > Permissions
* Tools menu > Page Info > Permissions
* click the globe icon in the address bar > More Information > Permissions
Here you can set the Java(TM) Platform SE 7 plugin to Block.
''If the Java applet is important, please complain to the site.'' As noted in the dialog, Oracle is planning to completely disable unsigned applets in the future.

How do I disable Security Warning - "The application requires an earlier...

h4. How do I disable Security Warning - "The application requires an earlier Java. Do you want to continue?" ?
The message is correct - our ESS application requires 1.4.08, but this message has begun with 1.6.11. Earlier versions of 1.6 did not produce this. Is there any setting anywhere that I can use to prevent this from displaying for my users?
Thanks.

The simplest approach is to only have the latest version of Java "enabled".
A fix, step-by-step, is as follows:
1. Close all browsers;
2. Make sure you are running latest version of Java (check this via Java Control Panel in Windows Control Panel, or, more simply, just download latest version from Java.com) (as of today's date, the latest version is 1.6.0_14);
3. Open Java Control Panel (via Windows Control Panel);
4. Go to "Java" tab;
5. Click on "View" in "Java Applet Runtime Settings" of that tab;
6. Uncheck "Enabled" for every version of Java listed EXCEPT for the latest version;
7. Click "OK", etc., and thus close Java Control Panel;
8. Restart browser(s);
9. Done.
Alternatively, you can Uninstall all earlier versions via Windows Control Panel - Programs and Features (This is in Vista; similarly in other Windows versions)... Select previous versions and uninstall them. Leave the most current version.
This was a puzzling one, at least for me. Took a while to figure out.
M

Dept of Homeland Security Warning re Java

Similar Messages

Maybe you are looking for