Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.java.programmer > #29982

Re: Grief!

Show all headers | View raw

On 9/14/2014 9:39 PM, Knute Johnson wrote:
> Two days of grief, my manifest file with only one line in it:
> 
> Permissions:         sandbox
> 
> Java kept rejecting the app as insecure.
> 
> knute...

I had similar pain, and did some research on it.  Here's
what I learned:

Starting with Java 7U51, the user can add exceptions to
the rule that blocks unsigned or self-signed apps from
running, by white-listing URLs using the Java control
panel.  The exception list is a list of sites from which
you will allow unsigned or self-signed code to run.  You
should add a couple of entries to enable running code
from your local computer:

http://localhost/
http://127.0.0.1/
https://localhost/
https://127.0.0.1/
file:///

Only the file:/// entry is needed unless you're running a
local server such as a web server, Tomcat, Glassfish, etc.,
and plan on serving up Java applets and/or WebStart
applications.  In that case, you may need to specify a
non-standard port number.  For example, by default the
Glassfish server uses port 8080, so you need to add
“http://localhost:8080/” and “https://localhost:8080/”.

Note that IPv6 isn't currently supported by this exception
list; also the JRE doesn't resolve name to IP addresses, so
you need both the host name as well has the IP addresses
added.  Also note you will get a warning with http: and
file: protocols.  Since you are using localhost, it doesn't
matter so you should ignore those warnings.

For full details, you may which to view the web page I put
together on code signing (which includes information on
the required manifest entries):

   <http://wpollock.com/AJava/SignedCodeDemo/>

-- 
Wayne

Back to comp.lang.java.programmer | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Grief! Knute Johnson <nospam@rabbitbrush.frazmtn.com> - 2014-09-14 18:39 -0700
  Re: Grief! Arne Vajhøj <arne@vajhoej.dk> - 2014-09-14 21:51 -0400
    Re: Grief! Knute Johnson <eternal@knutejohnson.com> - 2014-09-15 14:09 -0700
      Re: Grief! Eric Sosman <esosman@comcast-dot-net.invalid> - 2014-09-15 17:32 -0400
        Re: Grief! Knute Johnson <eternal@knutejohnson.com> - 2014-09-15 15:49 -0700
  Re: Grief! Wayne <nospam@all.invalid> - 2014-09-14 22:14 -0400
  Re: Grief! Kevin McMurtrie <mcmurtrie@pixelmemory.us> - 2014-09-14 21:23 -0700
    Re: Grief! Josip Almasi <joe@vrspace.org> - 2014-09-15 17:25 +0200
    Re: Grief! Knute Johnson <eternal@knutejohnson.com> - 2014-09-15 14:13 -0700

csiph-web