Four Java Applet signing questions

hi all;
I'd like to ask a few quick questions about applet signing. As you know there is a "Security Warning" Gray Alert box that appears when the user tries to load your signed applet.
1. When the alert window asks someone to accept the signed applet, is it possible to some how capture the Yes or No button click event by javascript or something like that ? I noticed that the Yes and No Response seems to be saved in an in-memory cookie? Is it possible to figure out wht the person clicked ?
2. Is it possible to keep that "Security Warning" Alert box on top so that the user will not be able to accidentally ignore it (it goes under the browser and stays there).
3. Is there some way to inspect the PC to determine weather your applet loaded properly - apart from seeing a properly working applet ? For example , If I want to make sure it is being cached properly.
4. When a new version of the applet is available on the server ? how does the browser know to download something ? is that something I would code for manually or would is this automatically handled behind the scenes.
Thanks in advance
Stephen

I can only reply to nr 1 but looking at java.security.AccessControl there is a method called checkPermission() you can use.

Similar Messages

Signed Java Applet

0 down vote favorite
I have written an applet with Netbeans. When I click on Clean and Build then Netbean create a jar file "Test.jar" and also another folder called lib in the same directory. I've signed the Test.jar. Basically this applet upload files to server with FTP. So when Applet loads into browser then I am able to select files but when I click on upload then it stops. So my question is:
1. Have I also need to sign all dependent jar files?
2. My directory structure is as follow:
C:\AppletPage.html C:\Test.jar C:\lib
and code in html file is as follow
<applet code="UploadGUI.class"
archive="test.jar"
width=400 height=400></applet>Please advice me where am I wrong?
Thanks in Advance

Shahid_Hanif wrote:
0 down vote favoriteHuhh?
I have written an applet with Netbeans. ..My condolences.
..lWhen I click on Clean and Build then Netbean create a jar file "Test.jar" and also another folder called lib in the same directory. I've signed the Test.jar. Basically this applet upload files to server with FTP. ..If you deploy the applet in a Plug-In 2 architecture JRE and launch it using Java Web Start - it can be sand-boxed.
..So when Applet loads into browser then I am able to select files but when I click on upload then it stops. .. What messages appear in the Java Console? Does the code of the applet [swallow exceptions|http://pscode.org/javafaq.html#stacktrace] (<- link)?
..So my question is:
1. Have I also need to sign all dependent jar files?What dependent Jars? The applet element shown lists only one Jar in the archive attribute.
2. My directory structure is as follow:
C:\AppletPage.html C:\Test.jar C:\libWhat (if anything) is in 'lib'?
Edit 1:
Also posted to [http://stackoverflow.com/questions/3740006/java-applet-sign]
Edited by: AndrewThompson64 on Sep 18, 2010 1:07 PM

Question about Java Applet Jar file signing.

These questions pertain to Java 6 Standard Edition 1.6.0_22-b04 and later.
I have gone through the Oracle Java Tutorial for generate public and private key information
to sign a jar file, and how to sign the jar itself, all at
[http://java.sun.com/developer/onlineTraining/Programming/JDCBook/signed.html|http://java.sun.com/developer/onlineTraining/Programming/JDCBook/signed.html]
, and seek some clarification on the following related questions:
-In order to "escape" the java applet sandbox that exists around the client's
copy of the applet running in their web browser, ie.
(something forbidden by default), is verification of the signed applet enough, or is a policy file required
to stipulate these details?
-using the policytool policy file generator, what do I need to add under "Principals"
(if anything) when dealing with a Java applet? Are Codebase and SignedBy simply author information?
-If I choose to use a java.security.Permission subclass object set up in equivalent fashion within the Applet,
which class within the Applet jar do I instantiate that object in? Does it need to be mentioned
in the applet's jar Manifest.MF file?
-Is the "keystore database" a java language service/process which runs in
the Server's memory and is simply accessed and started by default
by the client verifier program (appletview/web browser)?
-The public key certificate file (*.cer) is put in the webserver directory holding
the Applet jar file (ie. Apache Tomcat, for example).
-Presumably, the web browser detects the signed jar
and certificate file, and provides the browser pop up menu asking the user
about a new, non recognised certificate (initially).
Is this so?
-With this being the case, can the applet now escape
the sandbox, be it with or without the stipulated
policy permissions?

848439 wrote:
-In order to "escape" the java applet sandbox that exists around the client's
copy of the applet running in their web browser, ie.
(something forbidden by default), is verification of the signed applet enough, or is a policy file required
to stipulate these details?Just sign the applet, the policy file is not necessary.
-Is the "keystore database" a java language service/process which runs in
the Server's memory and is simply accessed and started by default
by the client verifier program (appletview/web browser)?No.
-The public key certificate file (*.cer) is put in the webserver directory holding
the Applet jar file (ie. Apache Tomcat, for example).No. For a signed Jar, all the information is contained inside the Jar.
-Presumably, the web browser detects the signed jar
and certificate file, and provides the browser pop up menu asking the user
about a new, non recognised certificate (initially).
Is this so?No. It is the JVM that determines when to pop the confirmation dialog.
-With this being the case, can the applet now escape
the sandbox, ..Assuming the end-user OK's the trust prompt, yes.
..be it with or without the stipulated
policy permissions?Huh?

Java applet warning keeps coming back for signed applet

I have an applet signed with certificate issued by a public CA cert verisign. This applet prints document to the printer. When it loads everything looks good and checks on the screen and the user is prompted to allow access to the printer. Even, though the user selects "Allways allow this applet to print" the warning keeps coming back everytime the applet attempts to access the printer.
I notice other applets work correctly. I veriy the signed jar and it all looks correct every class file comes with smk marking.
What is going, can someone please help???
Manuel

I appreciate the help. but i was able to resolve the problem. Our web page called the applet print method directly from scripting. Apparently that causes the java plugin to warn the user every time.
To avoid this issue the new print method queues up a print job and a separate thread watches for the queue and picks up the job and prints it. In order to support the same original function, the new print method is syncronized and waits for the job to be queued before it returns.
Now, there are no warnings even the first time you use the applet.
[Here is another similar thread.|http://forum.java.sun.com/thread.jspa?forumID=63&threadID=524815]
Thanks,
Manuel

Java Applet Certificate Signing Window comes up BLANK!

Hi Everyone I have a problem where
Java Applet Certificate Signing Window comes up BLANK!
It comes up as blank gray panel with the java logo on the upper left.
the title bar says "Java Plugin Security Warning"
And I can't figure out what to do to make it come up properly. I tried double clicking it dragging it around to make it repaint itself nothing happens.
I have tried clearing temp files deleting files from IE, deleting cookies, clearing the history.
Now i'm going to restart the computer and see if it works.
It is supposed to give me buttons.
1. Accept for this session
2. Grant
3. Deny
4. View Certificate
But does anyone have any idea how to address this issue ?
Stephen

You might try setting the trace level to 5 in the plugin's Java console and looking what it spits out while the applet is launching. I remember seeing loads of information in there including stuff relating to certificate validation. It might be helpful.
The trick to getting this info during start up:
1) get the plugin to load by directing your browser to page with a known applet. Write your own little stub applet and load it or go to http://java.sun.com/. There's an applet on that page.
2) bring up the plugin's console if it's not already and then go to a blank page.
3) set the trace level to 5 in the console. (just press the 5 key).
4) go to the page that launches your applet. You'll have tons of information pour out in your console.
Happy hunting.

Java Applet Window showing on signed applet popups

I have an applet deployed that is signed, but I'm experiencing a very annoying problem with JPopup windows that cross outside the border of the JFrame created by the Applet.
Those pop-up windows still show the warning at the bottom "Java Applet Window". That part is pretty annoying and I don't understand why it's doing that since they are coming from a signed, trusted applet.
Just to be clear, any of the JPopups or JDialogs or anything else we display inside the frame doesn't have this warning since we signed the applet.

Our team is also using a signed applet and are having trouble with popup items not being accessible outside of the JFrame.
In appletviewer the popup (JXDatePicker) is fully accessible. If running in Internet Explorer on Windows 2000 the portion of the popup outside of the JFrame paints correctly but cannot receive click events correctly.
It would be preferrable that if the popup cannot receive events outside of the applet frame that the popup would be smart enough to pop itself fully in the applet frame.
Any suggestions?
Thank you.

Realy no one knows how to remove the word "java applet window" besides sign

Hi, everyone,
I am trying to remove the line "java applet window" from my nice/colorful interface, but what I was told is that I can not remove if i do not sign for digital singiture. Is this really a limition of Applet?
I do not know why t he design want to add this stupid feature. As most people are not technical people, they do not care whether it is applet or not. For technical people, they should know that some thing popup from the browser and have a "java" sign on the right top corner is Applet.
Only too sad about that.

In the browser window, the address bar will also display the correct URL for the page being displayed.
An applet window could spoof this address bar and otherwise mimic the look and feel of the browser (or any other application), thus tricking the user into believing the window to be legitimate.
Just because there are already potential security/privacy issues in the applet specification, doesn't mean we want to open up another one! Why do you want an unsigned applet with a window without a warning message? You'll need a certificate anyway if you're planning on using secure communication - sending client data across an unsecure connection is rather less professional than spawning a window with a well-known and generally-ignored warning message.

How to sign java applet policy to end user?

i have putted my applet class on server, i want all end users can access it on server, how to sign the java.policy to there JRE?
can anyone help me?

I found this some where else. It shows how to sign an applet.
START OF DOC
How To Sign a Java Applet
The purpose of this document is to document the steps required to sign and use an
applet using a self-signed cert or CA authorized in the JDK 1.3 plugin.
The original 9 steps of this process were posted by user irene67 on suns message forum:
http://forums.java.sun.com/thread.jsp?forum=63&thread=132769
-----begin irene67's original message -----
These steps describe the creation of a self-signed applet. This is useful for testing purposes. For use of public reachable applets, there will be needed a "real" certificate issued by an authority like VeriSign or Thawte. (See step 10 - no user will import and trust a self-signed applet from an unkown developer).
The applet needs to run in the plugin, as only the plugin is platform- and browser-independent. And without this indepence, it makes no sense to use java...
1. Create your code for the applet as usual.
It is not necessary to set any permissions or use security managers in
the code.
2. Install JDK 1.3
Path for use of the following commands: [jdk 1.3 path]\bin\
(commands are keytool, jar, jarsigner)
Password for the keystore is any password. Only Sun knows why...
perhaps ;-)
3. Generate key: keytool -genkey -keyalg rsa -alias tstkey
Enter keystore password: *******
What is your first and last name?
[Unknown]: Your Name
What is the name of your organizational unit?
[Unknown]: YourUnit
What is the name of your organization?
[Unknown]: YourOrg
What is the name of your City or Locality?
[Unknown]: YourCity
What is the name of your State or Province?
[Unknown]: YS
What is the two-letter country code for this unit?
[Unknown]: US
Is CN=Your Name, OU=YourUnit, O=YourOrg, L=YourCity, ST=YS, C=US
correct?
[no]: yes
(wait...)
Enter key password for tstkey
(RETURN if same as keystore password):
(press [enter])
4. Export key: keytool -export -alias tstkey -file tstcert.crt
Enter keystore password: *******
Certificate stored in file tstcert.crt
5. Create JAR: jar cvf tst.jar tst.class
Add all classes used in your project by typing the classnames in the
same line.
added manifest
adding: tst.class(in = 849) (out= 536)(deflated 36%)
6. Verify JAR: jar tvf tst.jar
Thu Jul 27 12:58:28 GMT+02:00 2000 META-INF/
68 Thu Jul 27 12:58:28 GMT+02:00 2000 META-INF/MANIFEST.MF
849 Thu Jul 27 12:49:04 GMT+02:00 2000 tst.class
7. Sign JAR: jarsigner tst.jar tstkey
Enter Passphrase for keystore: *******
8. Verifiy Signing: jarsigner -verify -verbose -certs tst.jar
130 Thu Jul 27 13:04:12 GMT+02:00 2000 META-INF/MANIFEST.MF
183 Thu Jul 27 13:04:12 GMT+02:00 2000 META-INF/TSTKEY.SF
920 Thu Jul 27 13:04:12 GMT+02:00 2000 META-INF/TSTKEY.RSA
Thu Jul 27 12:58:28 GMT+02:00 2000 META-INF/
smk 849 Thu Jul 27 12:49:04 GMT+02:00 2000 tst.class
X.509, CN=Your Name, OU=YourUnit, O=YourOrg, L=YourCity, ST=YS, C=US
(tstkey)
s = signature was verified
m = entry is listed in manifest
k = at least one certificate was found in keystore
i = at least one certificate was found in identity scope
jar verified.
9. Create HTML-File for use of the Applet by the Sun Plugin 1.3
(recommended to use HTML Converter Version 1.3)
10. (Omitted See Below)
-----end irene67's original message -----
To make the plug-in work for any browser you have two options with the JDK 1.3 plugin.
1) Is to export a cert request using the key tool and send it to a CA verification source like verisign.
When the reponse comes back, import it into the keystore overwriting the original cert for the generated key.
To export request:
keytool -certreg -alias tstkey -file tstcert.req
To import response:
keytool -import -trustcacerts -alias tstkey -file careply.crt
An applet signed with a cert that has been verified by a CA source will automatically be recognized by the plugin.
2) For development or otherwise, you may want to just use your self-signed certificate.
In that case, the JDK 1.3 plugin will recognize all certs that have a root cert located in the JDK 1.3 cacerts keystore.
This means you can import your test certificate into this keystore and have the plugin recognize your jars when you sign them.
To import self-signed certificate into the cacerts keystore, change directory to where the JDK plugin key store is located.
For JDK 1.3.0_02: C:\Program Files\JavaSoft\JRE\1.3.0_02\lib\security
For JDK 1.3.1: C:\Program Files\JavaSoft\JRE\1.3.1\lib\security
Import your self-signed cert into the cacerts keystore:
keytool -import -keystore cacerts -storepass changeit -file tstcert.crt
(the password is literally 'changeit')
Now, regardless of which method you use, the applet should be recognized as coming from a signed jar. The user can choose to activate it if he / she chooses. If your applet uses classes from multiple jars, for example Apache's Xerce's parser, you will need to sign those jars as well to allow them to execute in the client's brower. Otherwise, only the classes coming from the signed jar will work with the java.security.AllPermission setting and all other classes from unsigned jars will run in the sandbox.
NOTE: Unless otherwise specified by the -keystore command in all keytool and jarsigner operations, the keystore file used is named '.keystore' in the user's home directory.
The first time any keystore is accessed (including the default) it will be created and secured with the first password given by the user. There is no way to figure out the password if you forget it, but you can delete the default file and recreate it if necessary. For most operations, using the -keystore command is safer to keep from cluttering or messing up your default keystore.

Signed java applets not working on lion?

After downloading java plugin on osx Lion, signed java applets fail to start. This is the error I get in java console, seems like the certificate is not imported to keychain? any workaround?:
java.lang.reflect.InvocationTargetException
    at java.awt.EventQueue.invokeAndWait(EventQueue.java:1078)
    at javax.swing.SwingUtilities.invokeAndWait(SwingUtilities.java:1326)
    at com.koutbo6.gui.swing.GameApplet.init(Unknown Source)
    at sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Plugin2Manager.ja va:1640)
    at java.lang.Thread.run(Thread.java:680)
Caused by: java.security.AccessControlException: access denied (java.awt.AWTPermission setWindowAlwaysOnTop)
    at java.security.AccessControlContext.checkPermission(AccessControlContext.java:37 4)
    at java.security.AccessController.checkPermission(AccessController.java:546)
    at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
    at java.awt.Window.setAlwaysOnTop(Window.java:2038)
    at com.koutbo6.gui.swing.Q.<init>(Unknown Source)
    at com.koutbo6.gui.swing.GameApplet.a(Unknown Source)
    at com.koutbo6.gui.swing.P.run(Unknown Source)
    at java.awt.event.InvocationEvent.dispatch(InvocationEvent.java:199)
    at java.awt.EventQueue.dispatchEventImpl(EventQueue.java:677)
    at java.awt.EventQueue.access$000(EventQueue.java:85)
    at java.awt.EventQueue$1.run(EventQueue.java:638)
    at java.awt.EventQueue$1.run(EventQueue.java:636)
    at java.security.AccessController.doPrivileged(Native Method)
    at java.security.AccessControlContext$1.doIntersectionPrivilege(AccessControlConte xt.java:87)
    at java.awt.EventQueue.dispatchEvent(EventQueue.java:647)
    at java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatchThread.java:29 6)
    at java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchThread.java:211)
    at java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:20 1)
    at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:196)
    at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:188)
    at java.awt.EventDispatchThread.run(EventDispatchThread.java:122)

All these settings were set as expected, yet im still facing the same problem
I enabled security debugging and this is the information I got:
security: Loading certificates from Deployment session certificate store
security: Loaded certificates from Deployment session certificate store
security: Loading Root CA certificates from from keychain
security: Loaded Root CA certificates from from keychain
security: Validate the certificate chain using CertPath API
security: Obtain certificate collection in Root CA certificate store
security: Obtain certificate collection in Root CA certificate store
security: Obtain certificate collection in Root CA certificate store
security: jpicertstore.cert.getkeystore
security: No timestamping info available
security: Cannot find jurisdiction list file
security: The CRL support is enabled
security: KB Programming Analysis and PC Operating Center
security: ObjectId: 2.5.29.31 Criticality=false
CRLDistributionPoints [
[DistributionPoint:
     [URIName: http://crl.thawte.com/ThawteCodeSigningCA.crl]
security: Thawte Code Signing CA
security: ObjectId: 2.5.29.31 Criticality=false
CRLDistributionPoints [
[DistributionPoint:
     [URIName: http://crl.thawte.com/ThawtePremiumServerCA.crl]
security: Use CRL setting from certificate
security: The OCSP support is enabled
security: KB Programming Analysis and PC Operating Center
security: ObjectId: 1.3.6.1.5.5.7.1.1 Criticality=false
AuthorityInfoAccess [
   accessMethod: 1.3.6.1.5.5.7.48.1
   accessLocation: URIName: http://ocsp.thawte.com]
security: This certificate does not have AIA extension
security: Use OCSP setting from certificate
network: Cache entry not found [url: http://crl.thawte.com/ThawtePremiumServerCA.crl, version: null]
network: Connecting http://crl.thawte.com/ThawtePremiumServerCA.crl with proxy=DIRECT
network: Connecting http://crl.thawte.com:80/ with proxy=DIRECT
network: Downloading resource: http://crl.thawte.com/ThawtePremiumServerCA.crl
          Content-Length: 181,278
          Content-Encoding: null
network: Wrote URL http://crl.thawte.com/ThawtePremiumServerCA.crl to File /Users/koutbo6/Library/Caches/Java/cache/6.0/38/2fb889a6-30a08967-temp
network: Connecting http://ocsp.thawte.com/ with proxy=DIRECT
network: Connecting http://ocsp.thawte.com:80/ with proxy=DIRECT
network: CleanupThread used 990300 us
network: Connecting http://ocsp.thawte.com/ with proxy=DIRECT
network: Connecting http://ocsp.thawte.com:80/ with proxy=DIRECT
security: This certificate has been revoked
Ignored exception: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: Certificate has been revoked

Using external libraries over signed Java applet: InvocationTargetException when running locally with 7u51

We have a signed Java applet that uses external libraries, specifically the OpenOffice application libraries.
We have a problem running Java applet with 7u51 of "InvocationTargetException" when use these libraries OpenOffice, that is not signed; regardless of the browser used (Mozilla Firefox, Explorer, Chrome).
Please, as you could solve this problem? This problem can not arose with 7u40 and earlier..
Best regards.

In java - JRE 1.7.0_51-b13 and signed applet - Stack Overflow found solution. I've missed to add in external jars manifest this:
Trusted-Library: true

How to sign a java applet using iPlanet SSL certificate?

Dear all,
I have a IPlanet web server with SSL installed,
can I use the SSL certificate to sign my java applet which will run on the server? how to sign a java applet in this scenario? somebody please help me! thanks!
yours sincerely
dashel

Why can't you create jar files?

I can't run signed Java Applets

HI
I have a java applet where I need to have acces to a local file, but I can't get IE to run the applet. (IE do not come with the Secutiy Warning window.)
From the homepage, I run the applet via:
<applet name=read_file code="read_file.class" width="0" height="0">
<script language="JavaScript">
document.read_file.file_read();
</script>
And the java code is:
import java.applet.*;
import java.awt.*;
import java.io.*;
public class read_file extends Applet{
     public char[][] ip;
     public int counter;
     public String te="dette er en java test";
public void init() {
public void file_read() {
     String str;
     counter =0;
     try {
     BufferedReader in = new BufferedReader(new FileReader("c:\test\config.txt"));
          while ((str = in.readLine()) != null){
               ip[counter] = str.toCharArray();
               counter++;
          in.close();
     } catch(IOException e) {
public void test() {
I have signed the cab file with:
"C:\Program Files\Microsoft.NET\SDK\v1.1\Bin\signcode.exe" -j "C:\Program Files\Microsoft.NET\SDK\v1.1\Bin\JAVASIGN.DLL" -jp High -v hjl.pvk -spc hjl.spc -n "oil" -i "www.vedikke endnu-.dk" "C:\Documents and Settings\rbn\Desktop\UIp\hjemmeside\read_file.cab"
and maket the cab fil with:
"C:\Documents and Settings\rbn\Desktop\UIp\cab\BIN\MAKECAB.EXE" "C:\Documents and Settings\rbn\Desktop\UIp\java\read_file.class" "C:\Documents and Settings\rbn\Desktop\UIp\hjemmeside\read_file.cab"
What do I need to different ?

I see no reason why you want to make this applet for the msjvm, here is how you do it with the sun sdk:
Signing applets:
http://forum.java.sun.com/thread.jsp?forum=63&thread=524815
second post and last post for the java class file
http://forum.java.sun.com/thread.jsp?forum=63&thread=409341
4th post explaining how to set up your own policy with your own keystore
(my copy and paste fingers are really getting tired now, copyd and pasted this
for about a 100 times now)
Notice some differences in the html code of the examples (they don't use the applet tag)
If you're aiming for the msjvm because you don't want any support form MS in
the near future and want to delever a legacy unsupported unmaintainable applet
than I have to ask you how you compiled the applet. If you used the SUN sdk
then are you aware that the msjvm cannot handle java version higher than 1.1?
So you have to compile it like this: javac -source 1.3 -target 1.1 ....
Your html file seems to be missng the cabbase value so how do you expect
IE to find the cab file?

Using the Portal Single Sign-On for java applet clients

Hi
We have a task to build a java applet working within a portlet and comunicating to some session EJB(wrapped BC4J) running on the OC4J. The applet is presumably connecting to server via RMI. This connection should be restricted to some groups of portal users.
When a user is entering the applet he is supposed to be already logged into the Portal.
There is a lot of information on building custom secure portlets using only a pure HTML(same as JSP) client whith the help of the Portal Single Sign-On.
But, is it possible to use the Single Sign-On for establishing a secure RMI connection from applet to OC4J without entering a password in the applet once more?
Yuriy

Perhaps you can write a small JSP page or PLSQL
web procedure that will grab user name from
the SSO Server (via SSOSDK/mod_osso)
and invoke the applet with encrypted user name.
The applet will receive the encrypted username
and decrypt it to get the clear user name.
This help to get Single Sign-On.
To make sure that environment is secure, encrypted
user name parameter should have random salt,
user name, and time stamp to prevent replay attack.
Applet must make sure that the encrypted users name
time stamp set by the JSP/PLSQL page has value
within a reasonable time limit like 5 minutes

Developing a java applet questions?

I am new to java, I want to write a java applet to do the printing for word document and pdf, is it possible, I hope that one expert can share me a good sample code .
By the way, for developing a java applet , what development environment should I install?
Thanks in advance.

You can certainly generates PDF documents in Java using 3rd party, free libraries, probably .doc documents as well. Google for these and you'll find them.
You should try Eclipse and NetBeans. Both are free and widely used for Java development.

Java applet shows basket with ? (question mark) why?

Hi
In one of the SRM Business Object . Approval preview shows as Question mark .
but table wise it seems fine. why ?
I wanted to know why i am seeing ? mark . i dont want this. i want get rid of this
any help is appreciated.
i wanted to recreate. any trick is appreciated.
Muthu

Hi Rick
thanks much
Are you telling that no agent find for approval ?
now everything approved. i wanted to clear that applet question mark.
auditor will ask me waht is this?
is it possible to clear?
1 Workflow started
2. muthu raman (approver name - really approved)
3. ? (behind cart)
now every thing is OK. now i need to clear this question mark ( it is unwanted for me)
appreciate your help.
i will try to recreate this scenario .
if i were recreated in dev. and think of to clear. since it happened in production.
indeed appreciate your help
worry is that after approval properly. now another applet shows question mark?
any help is appreciated to recreate this issue. i could realise from technical person that this object was forwarde to many persons and approved. wf is a greek for me.
n step approval by BADI ..
muthu

Four Java Applet signing questions

Similar Messages

Maybe you are looking for