Signed java 1.1.8 applet

Question

I'm developing with jdk1.1.8 today to support MSJVM, such that user of old Windows don't have to install java explicity to run my applet. Now I have come to the point where I need a signed applet. I have searched the net and the information I get is that signing applet was very starge before java Plugin 1.3, where it became more unified.
So my questions are:
What options do I have if I wish to remain using jdk1.1.8 and I want a signed applet that should be abel to run in any browser on any OS?
If a users uses windows and haven't isntalled any recent JRE. That is he only have the MSJVM to run applets. Is there a way that he can use an applet signed according to the java plug-in 1.3 scheme without having to download a recent JRE?
Ok I dont know if that makes any sense, but I hope someone can give me some answers.
thanks
Robert

Answer 1

You need to use the cabsign utility from MS to sign for MSJVM.
Here are some snippets from my cygwin bash script for signing jars and cabs:
if [ $makecabs -ne 0 ]; then
echo '#' cabarc $pdir $sdls
rm -f ../code/jars/unsigned/$prnm.cab
cabarc -r -p N ..\\code\\jars\\unsigned\\$prnm.cab \*.class \*.gif > ${prnm}-cab.log
fi
if [ $makejars -ne 0 ]; then
echo '#' jar $pdir $sdls
rm -f ../code/jars/unsigned/$prnm.jar
pwd
echo "jar -cvf ..\\code\\jars\\unsigned\\$prnm.jar $sdls"
jar -cvf ..\\code\\jars\\unsigned\\$prnm.jar $sdls > ${prnm}-jar.log
fi
sign() {
key=${keys[$2]}
kid=${kids[$2]}
par=${part[$1]}
cls=${pcls[$1]}
nam=${pnam[$1]}
mkdir -p ../docroot/code/jars/$key
if [ $makejars -ne 0 ]; then
echo '#' signing jar $1 $2 key:$key kid:$kid par:$par
pwd
jarfile="..\\docroot\\code\\jars\\$key\\$cls.jar"
cp -f ../docroot/code/jars/unsigned/$cls.jar ../docroot/code/jars/$key/$cls.jar
echo jarsigner -keystore ..\\keys\\.keystore -storepass $password $jarfile $kid
jarsigner -keystore ..\\keys\\.keystore -storepass $password $jarfile $kid <<EOF
EOF
fi
if [ $makecabs -ne 0 ]; then
echo '#' signing cab $1 $2 key:$key kid:$kid par:$par
certfile="..\\keys\\"${keyc[$2]}
keyfile="..\\keys\\"${keyk[$2]}
cabfile="..\\docroot\\code\\jars\\$key\\$cls.cab"
cp -f ../docroot/code/jars/unsigned/$cls.cab ../docroot/code/jars/$key/$cls.cab
if [ $noauto -eq 1 ]; then
signcode -j javasign.dll -jp "low" -spc $certfile -v $keyfile -n $key $cabfile
else
echo '#' autosign.vbs $certfile $keyfile $cabfile $password $key $nam
cmd /c cscript autosign.vbs $certfile $keyfile $cabfile $password $key $nam
fi
signcode -x -t http://timestamp.verisign.com/scripts/timstamp.dll -tr 5 $cabfile
chktrust $cabfile
fi
return 0
You need different certificates for jar and cab signing. The applet tag to support both
jars and cabs needs some fussing too.