Signed applet is only executed once

Hi!
Since the update to FF 3.6.14 (today I think), a signed applet which I developed myself and signed it with an official certificate, will only work for the first time called.
On the first call, I am presented with the "Do you trust this?" JRE-question and on approval everything works fine.
If I open the page once more, I get some SecurityException.
Everything works fine in IE8 or Chrome...
Any hints?
regards
Johannes

https://bugzilla.mozilla.org/show_bug.cgi?id=629030

Similar Messages

Producer consumer loop only execute once?

Hello here,
In my VI, the producer loop seems working continuously, but the consumer loop only execute once.
I haven't used producer/consumer pattern before, could someone give me some ideas why this happens?
My code is in attachment.
Thank you in advance.
Yaqiong
Solved!
Go to Solution.
Attachments:
parallel - Copy.vi ‏72 KB

That would be the poor choice of using an event structure in the consumer loop. As set up you must generate a mouse Leave or mouse enter event on Waveform Graph for the consumer loop to finish its first iteration.
Delete the event structure. you don't need it to update a graph.
Jeff

WLI Process only execute one at a time

Hi Guys,
I am new to WLI, and have what could be a simple question:
I have a seperate java program that puts messages one by one in sequence onto a JMS queue.
I have built a channel and a JPD that subscribes to this channel. The purpose of the JPD is to take the message from the incoming JMS queue, perform some adhoc functionality, and then return the message to a different outgoing JMS queue.
This works fine, however how do I ensure that only one JPD process is executed in full, before another is started.
e.g of problem: if a really big message is put onto the incoming JMS queue, it might take 10seconds to process, but in that time another message (small) is put onto the incoming queue. This means that another process instance kicks off, and that the second message is put onto the outgoing queue FIRST because it takes less time to process.
How do I ensure that the JPD process only executes once in full, at a time?
At the moment, the JPD has "stateless" set to false.
Any help would be greatly appreciated.
Regards.

I think if you follow a similar technique as outlined in http://edocs.bea.com/workshop/docs81/doc/en/integration/samples/sampleSuppressible.html?skipReload=true then it should work. The key points are to have a synchronous subscription to a MB channel, performing all your processing within this block, and to set the JMS event generator pool size to 1.

Signed applet only! ONCE...till changed

hi all,
building my application i come no to the stage whre i put the signed applet on the web server and let things go, but! i was trying to vision how to load,install and run the applet on the client's machine, and do versioning and integrity checks, as to minimize applet loading time?
any one have ideas!??

Java WebStart may be what you are after...
http://java.sun.com/products/javawebstart/index.html

Security Exception executing a signed Applet

Dear All,
I get a security exception (file permission ) when i try to execute a signed applet using java plugin version 1.4.2._02, the same applet works good in java plugin version 1.3.1_04.
Any ideas...???
Thanks in advance
KSRK123

Although not a solution for us as we are tied to the 1.2.2 plugin for now, we did try out 1.3.1_10 and it worked fine without any modifications to cacerts.
Please see our listings (below) and let us know if anything comes to mind. I'm fairly new to this but I thought the whole idea with 1.2.2 was that we shouldn't have to mess with the cacerts or policy files on a clients machine. Rather the Root Certificate of the browser was used for verification??
http://forum.java.sun.com/thread.jsp?forum=32&thread=480668&tstart=0&trange=15
http://forum.java.sun.com/thread.jsp?forum=63&thread=480895&tstart=0&trange=15

Signed applets won't run @ web, only locally

Hey, all elitist java folk, here is one for you:
I have succeded in creating a signed, and an un-signed java applet - both run well locally. The signed applet, writes to a local file.
Both are merely proof of concept.
So, here is the deal:
I upload both to a webserver (one of those where you get 50Mb for free) via ftp (not ASCII, binary transfer), and only the unsigned will run in my browsers (Opera, FF, MSIE tested).
The signed one writes to the screen: "Could not instantiate."
I belive the problem lies in the HTML, which is very basic but still works locally. I don't have any clsid-thingy, is this nessecary? Where do I read about this?
HTML that (should) load the signed applet:
<html>
<applet code="localfile.class" archive="localfile.jar" width="300" height="300">
</applet>
</body>
</html>As previously said, the unsigned applet work both from the web and locally, so I won't post any more html here...
Btw, I am not interessed in editing any policy-file; my signed applet should work "out-of-the-box" for any java-enabled browser on the Internet.
All I want is for the browser to load the signed java applet, ask user for certificate confirmation, and run it... Just like with http://jupload.sourceforge.net/applet-basic.html , which also access local filesystem.

If you open the Java Console what does it say?
There shouldn't be any difference in loading the applet locally or from the webserver... presuming the HTML and jar files and classnames and stuff are all correct relative to both locations.

Signed applet don't work on XP

Hi,
I'am currently working on a point-of-sale (POS) using windows XP/Firefox and a linux apache/jboss server.
I have developed a dynamic windows library in order to use an industrial printer connected to the POS to perform some printing without confirmation of the customer.
The POS is under Windows XP SP2 and use Firefox 2.0.0.11/JRE 1.5.0.14.
This dll is used by a signed applet located on the apache/jboss server.
The applet is correctly downloaded by the client, but normally i have to wait for the certicat authentification windows appearing and for confirming that i want execute the applet. And instead i have a java exception :
security: La v�rification du certificat � l'aide des certificats AC racine a �chou�
security: Aucune information d'horodatage disponible
java.lang.NullPointerException
     at com.sun.deploy.ui.UIFactory.showSecurityDialog(Unknown Source)
     at com.sun.deploy.security.TrustDeciderDialog.showDialog(Unknown Source)
     at com.sun.deploy.security.TrustDecider.isAllPermissionGranted(Unknown Source)
     at com.sun.deploy.security.TrustDecider.isAllPermissionGranted(Unknown Source)
     at sun.plugin.security.PluginClassLoader.getPermissions(Unknown Source)
     at java.security.SecureClassLoader.getProtectionDomain(Unknown Source)
     at java.security.SecureClassLoader.defineClass(Unknown Source)
     at java.net.URLClassLoader.defineClass(Unknown Source)
     at java.net.URLClassLoader.access$100(Unknown Source)
     at java.net.URLClassLoader$1.run(Unknown Source)
     at java.security.AccessController.doPrivileged(Native Method)
     at java.net.URLClassLoader.findClass(Unknown Source)
     at sun.applet.AppletClassLoader.findClass(Unknown Source)
     at java.lang.ClassLoader.loadClass(Unknown Source)
     at sun.applet.AppletClassLoader.loadClass(Unknown Source)
     at java.lang.ClassLoader.loadClass(Unknown Source)
     at sun.applet.AppletClassLoader.loadCode(Unknown Source)
     at sun.applet.AppletPanel.createApplet(Unknown Source)
     at sun.plugin.AppletViewer.createApplet(Unknown Source)
     at sun.applet.AppletPanel.runLoader(Unknown Source)
     at sun.applet.AppletPanel.run(Unknown Source)
     at java.lang.Thread.run(Unknown Source)
security: L'utilisateur a refus� les droits d'acc�s au code
basic: Taille de cache du chargeur de classes courant : 1
basic: Termin�...
basic: Jonction du thread d'applet...
basic: Destruction de l'applet...
basic: Elimination de l'applet...
basic: Sortie de l'applet...
java.lang.ExceptionInInitializerError
     at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
     at sun.reflect.NativeConstructorAccessorImpl.newInstance(Unknown Source)
     at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(Unknown Source)
     at java.lang.reflect.Constructor.newInstance(Unknown Source)
     at java.lang.Class.newInstance0(Unknown Source)
     at java.lang.Class.newInstance(Unknown Source)
     at sun.applet.AppletPanel.createApplet(Unknown Source)
     at sun.plugin.AppletViewer.createApplet(Unknown Source)
     at sun.applet.AppletPanel.runLoader(Unknown Source)
     at sun.applet.AppletPanel.run(Unknown Source)
     at java.lang.Thread.run(Unknown Source)
Caused by: java.security.AccessControlException: access denied (java.lang.RuntimePermission loadLibrary.C:\Program Files\BICImpression\impression_api.dll)
     at java.security.AccessControlContext.checkPermission(Unknown Source)
     at java.security.AccessController.checkPermission(Unknown Source)
     at java.lang.SecurityManager.checkPermission(Unknown Source)
     at java.lang.SecurityManager.checkLink(Unknown Source)
     at java.lang.Runtime.load0(Unknown Source)
     at java.lang.System.load(Unknown Source)
     at applets.impression.Impression.<clinit>(Impression.java:38)
     ... 11 moreand then the certicat authentification windows appears but it's too late, the applet won't never execute ...
the apache/jboss server is accessed via some gateway, firewal, ... tha t i can't control
the apache jboss/server on my own PC is accessed directly :
What is amazing, is that work fine with my own professionnal PC on W2000 SP4, with JRE1.5.0.14 and Firefox 2.0.0.11 :
when I look in the java console, the java freeze until i have answered this java security window (certicat authentification windows). And when i answered "run" no problem the applet makes her own job.
here is the code when it works :
security: La v�rification du certificat � l'aide des certificats AC racine a �chou�
security: Aucune information d'horodatage disponible
basic: Plugin modality.pushed
basic: Modalit� empil�e
basic: push javax.swing.JDialog[dialog0,379,296,519x323,layout=java.awt.BorderLayout,modal,title=Avertissement - S�curit�,defaultCloseOperation=HIDE_ON_CLOSE,rootPane=javax.swing.JRootPane[,3,22,513x298,layout=javax.swing.JRootPane$RootLayout,alignmentX=0.0,alignmentY=0.0,border=,flags=16777673,maximumSize=,minimumSize=,preferredSize=],rootPaneCheckingEnabled=true]
basic: Chargement arr�t�...
basic: Arr�t de l'applet...Conclusion
POS : Win XP SP2, JRE1.5.0.14 (i tried 1.5.0.6 and 1.6.3 the latest), Firefox 2.0.0.11 (I tried 2.0.0.0 and 3 beta2 don't work anyway)
my own server/client : W2000 SP4, JRE1.5.0.14, Firefox 2.0.0.11
Linux server : RHEL4
It works with IE on the POS with the linux sever but it's not the selected browser.
It works with IE on the POS with my own server.
It works with Firefox on the POS with my own server.
It works with IE on my own server with the linux sever but it's not the selected browser.
It works with IE on my own server with my own server.
It works with Firefox on my own server with the linux sever.
It works with Firefox on my own server with my own server.
If you have some idea to make it work i'm you're buyer !!
Thank a lot for reading this, and i apologize for my poor english ...
greetings,
Benoit
Edited by: bendur on Feb 29, 2008 3:49 AM

Ok I have found my problem :
On every web pages, we have defined some inactivity timeouts.
On my own server I have disabled these timeouts but not on the distant timeout.
And it seems that the timeout (defined in javascript ont he web pages : 3s) has a very bad influence on the launching of my applet ... only with firefox (with IE and Opera no problem)
My problem is anwsered but the problem keep alive for firefox ...

Signed applet sometimes throws AccessControlException

Hello,
Apparently I'm not the only one on this forum who's getting AccessControlExceptions in an applet. The strange thing is that I'm not getting them all the time.
I have a signed applet that's requesting files from a server (http) in regular intervals (thread). When the server sends back a file, it's written to the local filesystem. There's also a logging mechanism that's write files to the filesystem. Normally this applet runs continuously for weeks, months, ...
This system has been working fine for years now, until a few months ago. Now I sometimes get an AccessControlException while reading a System.getProperty or while reading file from the filesystem. Usually the applet runs fine for day without access problems and then suddenly I get a AccessControlException: Access denied on an action that wasn't a problem the last 1000 times it performed.
My first thought was that it might be an update of the JVM that was causing it. So I tried downgrading to 1.5, even 1.4 and still got the same problem.
Does any one has an idea what's causing this? I'm pretty much stuck on this problem.
Thanks.
Andy

May be you have updated the .java files which are related to your applet and if u update the .java files, u need to recompile and need to re-sign the applets
or
When you are signing the applet you will tell, how many number of days I think that may be expired...
otherwise no need....
This may be one reason.... Once I faced
May be this will help u

Please HELP !!! Signed Applet & Java Media Framework(JMF)

Hi,
I have written a self signed applet that is used for Recording voice running in browser:
The tag that I've given is as follows:
<OBJECT
classid = "clsid:CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA"
id="recordApplet"
codebase = "http://java.sun.com/products/plugin/autodl/jinstall-1_4_1-windows-i586.cab#Version=1,4,1,0"
WIDTH = 268 HEIGHT = 27>
<PARAM NAME = CODE VALUE = "RecWindow">
<PARAM NAME = ARCHIVE VALUE = "jmf.jar,sound.jar,SignedRecWindow.jar">
<PARAM NAME = "soundtrack" VALUE="testFile.mp3">
<PARAM NAME = "type" VALUE = "application/x-java-applet;jpi-version=1.4.1">
<PARAM NAME = "scriptable" VALUE = "true">
<PARAM NAME = "MAYSCRIPT" VALUE = "true">
</OBJECT>
I've also signed jmf.jar as well as sound.jar that come in JMF 2.1 and am including it the archive. These jars are downloaded on client machine.
My code works perfectly BUT only when JMF 2.1 is installed on the clients machine else I get a RunTime Exception stating "no permission to capture from applet".
JMF FAQ states that If a user chooses to allow playing back locally stored media files or saving media files locally, he/she can do so by making use of a policy file. http://java.sun.com/products/java-media/jmf/2.1.1/faq-jmf.html#jmf2-applet-run
My requirement is that once the user has agreed to the signed applet to run then there should be no need to install JMF rather use the jmf.jar that is downloaded on client machine.
Also how can I grant the permission (permission javax.sound.sampled.AudioPermission "record";) to my applet in client computers ?
The client should not be asked to add any files (policy) by itself, all must be transparent for him.
Thanks in advance.
Vipin.

I too have been trying to get Java JMF sound recording to work via webstart. No luck so far.
I even tried playing (security.AllPermissions) with .java.policy file in the user's home directory and even modifying java.policy in the JRE/lib/security directory. No luck there too!
I also added security.AllPermissions to the javaws.policy in the JRE/jawas/javaws.policy file. Still no luck!
Any idea, anyone?

Signed Applet running in weblogic server

Hi ,
Im a newbie with applet. Can anyone help me to clarify below question.
1. I have signed applet compile with jdk 1.4.2. It its running fine with JRE 1.4 and 1.4.2. However i need to upgrade the applet so that it can support JRE 1.6. Can anyone guide me regarding this issue as the applet will close if i running in jre 1.6. I got the below exception
java.io.FilePermission<<allFiles>> execute.
2. As i know, If i compiled the applet again, i need to signed the ja againr. I tried once and got below exception
ClassNotFoundException. can anyone give any idea how resolved this problem. Fyi, im using weblogic server 8.1
Thanks.
Regards

Normally, a 1.4 compiled and signed applet should work just fine under 1.6. No need to recompile and resign.
This is in theory and in my practice with my applets. Since you do have problems, please post here (copy and paste, don't paraphrase) full stack traces of the errors and relevant code where the error occurs.

Display of certificate when accessing a signed applet

HI
I have a signed applet which obviously displays a Certificate whenever it is Accessed.Now i would like the certificate to be displayed only once ie. ONLY when the applet is accessed for the first time and the user accepts(trusts) the certificate.The next time the user access the applet i do
not want the certificate to be displayed again as he has already accepted (trusted)the certificate.
is there a way to do this?
best regards
sumesh

Your user must import your certificate and store it as a trusted CA -- see step #9 on the link shown below:
http://developer.java.sun.com/developer/qow/archive/167/index.jsp
V.V.

Granting SocketPermission using signed applet

I have had a dream of locally caching a jar file for an applet so that all the code will be on the client machine after the first time the applet was loaded. Basically, I have a very thin applet composed of a jar class loader and a tiny applet which will check for a jar file on the client and download it from the server if it does not exist. These simple classes are in a signed jar file. Basically, this thin applet does the following:
1) Check for the big, app jar file in c:\Temp
2) If it does not exist, open a URL input stream and get the big jar
3) instantiate a jar class loader object on the now local, big jar file
4) load the "main" class
5) use reflection to run its initialization method
6) the application then attempts to open a socket to the server
I get all the way to step 6 and this is where things go bad. As far as I can tell, the "thin" app loader class has permission to do anything it wants since it was downloaded from a signed jar - I haven't tried to do anything I was not able to do with this class. I think the problem arises because the app class came from a non-signed jar file and it appears to have all the typical applet restrictions. I can make URL connections to the local client (since that's where the code was loaded from), but not anywhere else.
I was hoping all classes the "thin", privileged class loaded would inherit these privileges, but obviously the class permissions come from where the class was loaded from. This is a bummer and my guesses for solving this problem are:
1) grant permission to the entry class for the app somehow (I tried something like this by executing the entry method for the app in a AccessController.doPrivieleged block - no luck)
2) sign the app jar and somehow read and accept its certificate so that all classes loaded from this jar are privileged (I am not sure of how to do this)
I am hoping someone might have an elegant solution to this problem as this is really the last step in my caching solution. By the way, the entry app class is not an applet itself if this is useful information to anyone. The "thin" applet is the only applet and just hands control off to the entry method of the main app class in the jar.
TIA!

Signing an applet provides it with the ability to run outside the sandbox. This does not automatically give the applet permission to do anything it wants. The applet must still request the desired permission before actually attempting an operation that requires that permission. Depending on the browser or whether you are relying on the Java plugin, you need to call the necesary security method first. I wrote a signed applet back in May 2000 which also needed socket permission. I don't have access to the code anymore so I cannot recall exactly the classes and methods you need to invoke. If you search the Signed Applets forum for my name, there are several messages that should help you.
For example:
http://forums.java.sun.com/thread.jsp?forum=63&thread=132336

Applet (Loading things ony once)

Is there a way to only load things that you want once with an Applet. I only want the buttons and the background to load one time and then I want paint to just move an airplane across the screen (on top of the bg). Here is the code I'm using. When I comment out the firstTime flag it works (but it flickers)
private boolean firstTime = true;
public void paint(Graphics g)
if (firstTime)
   doStuff(g);
   firstTime = false;
g.drawImage(airplane, xPos, 0, 150, 100, this);
xPos += 10;
repaint();
// I want this executed once. Possible?
public void doStuff(Graphics g)
// Get the width and height of the applet.
int width = getWidth();
int height = getHeight();
// Set the 'level' buttons to the lower left hand corner
// of the scren.
easy.setBounds(0,height-20,40,20);
medium.setBounds(50, height-20, 50, 20);
hard.setBounds(110, height-20, 50,20);
// Draw the background image.
g.drawImage(bg1, 0, 0, width, height, this);
firstTime = false;
}

i did, but the problem was that i couldn't draw the image because i didn't have a Graphics object. When I created a graphics object it still didn't draw it.

Restricting signed applets!

hi all...
I have a very direct question, yet for hours i've been scouring around for a direct answer. just tell me, for a signed applet, does it haf ALL PERMISSIONS? is it not possible to restrict a signed applet, for example, able to read a file but cannot write a file? could this actually be set inside the java.policy file?
i haf read many forums, some saying signed applet will haf all permissions, while others saying otherwise. if we set the "usepolicy" property permission, i understand that signed or unsigned is no different, both adhering to the policy file, but that's not what i want. i've read that by not using "usepolicy", u can only grant permissions for unsigned applets in the policy file. is this true?
i know i'm long winded, but this is frustrating...
let's assume i'm using j2sdk 1.4.2_06.
can we clear this issue once and for all?
p/s: on a personal note, i think that if u cant restrict what a signed applet can do, that is reaaaaalllyyyyyyy bad....

could this actually be set inside the java.policy file?Yes, in the java.policy under grant {
permission java.lang.RuntimePermission "usePolicy";
This will tell the jre to use policy for all applets including the signed ones.
The following:
grant codebase = "http://www.google.com/-" {
permission java.lang.RuntimePermission "usePolicy";
Will tell the jre to use policy for all the applets comming from google.
There is a way to grant based on who signed the applet but I never got it working:
http://forum.java.sun.com/thread.jsp?forum=63&thread=409341
You are looking for a policy that is used for all signed applet, I guess that is the policy
I never got working.
Here is the tutorial on the java.policy
http://java.sun.com/docs/books/tutorial/security1.2/toolsign/wstep3.html

Signed applet on local filesystem not working anymore

Hi,
Everyone knows that accessing local file system has always been a security threat.
But clients are our bread and butter.
Our clients have asked for web app consisting in a zip file, downloaded, containing an html page with dynamic content and links to many pdf.
So far, so good: i download my zip unzip it, access my pdfs, and once every pdfs have been modified, i click on a button that is from a signed applet, and the applet checks which pdfs have changed, and post the files to a web service on a server....Et voilà.
It's been working for at least 5 years like that.
But now my clients are updating to jre 7u45.
And as A LOT OF PEOPLE HERE....my applet won't load and work if i compile it with the new sdk....: i get the InvocationTargetException...exception
Is there an easy way to , step by step, compile , sign and yadi yada...and make it work.
I mean my applet has always did its job..., nothing will change in the code...it's only the annoying changing everything without warning.....
Anyone whould have an alternate approach instead of applet (my guess is NO).....: but nowadays with an applet you program 5 hours and you deploy 10 days.

I have the same issue here and it is not working anymore with auto-signed certificate too
I am going to stop using Safari if that , all is working fine with Chrome Firefox and Opera
Apple says
As a good security practice, you should validate PGP keys you receive, and not trust keys that cannot be validated. Information to validate the Apple Product Security PGP Key is available from
Maybe but this is my problem and if I want to trust anyway I must use another browser

Signed applet is only executed once

Similar Messages

Maybe you are looking for