Help needed to access Oracle from Applet.

Question

Please help. I have spent days reading info on the web and I simply cannot access to Oracle from an applet to work. Oracle is on a different IP than the Web Server. For my testing I am running the html directly from my local file system.
Here are the steps I have taken:
1. Create a key: "%JAVA_HOME%/bin/keytool" -genkey -alias MyAlias -keypass MyKPass -keystore C:\Keys.bin -storepass MySPass
2. Sign my jar: "%JAVA_HOME%/bin/jarsigner" -keystore C:\Keys.bin -storepass MySPass -keypass MyKPass -signedjar myjar-signed.jar myjar.jar MyAlias
3. Sign Oracle's Jar: "%JAVA_HOME%/bin/jarsigner" -keystore C:\Keys.bin -storepass MySPass -keypass MyKPass -signedjar ojdbc14-signed.jar ojdbc14.jar MyAlias
4. Applet Tag (at this time I have the two jars in the same folder as the HTML and JS files):
    <applet id="MyApp"
  codebase=""
  archive="myjar-signed.jar,ojdbc14-signed.jar"
  code="com/company/applets/Test.class"
  mayscript
  width="50" height="50">
    </applet>5. Javascript:
  document.observe("dom:loaded", function() {
  alert("Applet: " + $('MyApp').getVersion());
  $('MyApp').getConnection(url, user, pswd);
  alert("Applet: " + $('MyApp').getVersion() + "Got Connection.");
  $('MyApp').testConnection();
  alert("Applet: " + $('MyApp').getVersion() + "Connection Tested.");
});Execution:
1. The applet loads, The browser asks if I want to trust it, I say yes.
2. The '$('MyApp').getVersion()' works.
3. The '$('MyApp').getConnection(url, user, pswd);' fails. Java Code:
  public void getConnection(String url, String user, String pswd)
      throws Exception {
    try {
      System.out.println("Driver...");
      DriverManager.registerDriver(new oracle.jdbc.driver.OracleDriver());
      System.out.println("Connection...");
      _conn = DriverManager.getConnection(url, user, pswd);
      ...The driver registers, but the getConnection fails with a security error.
After much reading, I used policytool to update the policy file. It added:
keystore "file:/C:/Keys.bin", "jks";
grant signedBy "MyAlias" {
  permission java.security.AllPermission;
};This did not make any difference. Both IE and FF get the same error.
The JRE being used is 1.6.0_14.
Any help solving this would be MUCH appreciated.
Thanks.

Answer 1

I have simplified the problem, and now it has nothing to do with Oracle. It is a certificate/signing problem.
Here are the steps I took to set the test up:
Certificate:
"%JAVA_HOME%/bin/keytool" -genkey -storepass MyStorePswd -keyalg RSA -alias MyRsa -dname "CN=Company.com, OU=IT, O=Company Inc, L=Atlanta, ST=Georgia, C=US, DC=mailexpress, DC=com" -validity 999
"%JAVA_HOME%/bin/keytool" -selfcert -storepass MyStorePswd -alias MyRsa -validity 999
"%JAVA_HOME%/bin/keytool" -exportcert -storepass MyStorePswd -alias MyRsa -rfc -file MyRsa.cer
"%JAVA_HOME%/bin/keytool" -importcert -keystore "C:\Program Files\Java\jre6\lib\security\cacerts." -storepass changeit -alias MyRsa -file MyRsa.cer
Jar Signing:
"%JAVA_HOME%/bin/jarsigner" -storepass MyStorePswd -keypass MyStorePswd -signedjar Text-Project-signed.jar Text-Project.jar MyRsa
"%JAVA_HOME%/bin/jarsigner" -verify Text-Project-signed.jar
Result: jar verified.
HTML:
    <applet id="MyApp"
            codebase="file:/c:/projects/Text-Project/js/Memory"
            archive="Text-Project.jar"           <== unsigned test  OR
            archive="Text-Project-signed.jar"    <== signed   test
            code="com/company/applets/MemTest.class"
            mayscript
            width="50" height="50">
    </applet>
JavaScript:
document.observe("dom:loaded", function() {
  alert("Applet: " + $('MyApp').checkSecurity());
Function in the Applet:
  public String checkSecurity() {
    System.out.println("Security Check...");
    try {
      AccessController.checkPermission(new FilePermission("MemTest.js", "read"));
      AccessController.checkPermission(new FilePermission("MemTest.js", "write"));
      AccessController.checkPermission(new java.net.SocketPermission("192.168.1.121", "resolve"));
    } catch (Exception e) {
      e.printStackTrace();
      return e.getMessage();
    return "Security Checked OK";
  }Results (Internet Explorer):
1. Unsigned JAR, No policy:
Result = java.security.AccessControlException: access denied (java.io.FilePermission MemTest.js read)
(as expected)
2. Unsigned JAR, Policy = permission java.security.AllPermission:
Result = Security Checked OK
(as expected)
3. Signed JAR, No Policy: Popup states: signature verified; do you want to run the application.
Result = java.security.AccessControlException: access denied (java.io.FilePermission MemTest.js read)
(not expected)
Something is wrong with the certificate or signing process. Any ideas ?
Thanks.
Edited by: javadude.101 on Jul 29, 2009 12:29 PM