Name: boT120536 Date: 07/30/2001


java version "1.3.0_01"
Java(TM) 2 Runtime Environment, Standard Edition (build 1.3.0_01)
Java HotSpot(TM) Client VM (build 1.3.0_01, mixed mode)

There appears to be a bug when an applet loads multiple jars that have some
signed by one certificate and others signed by another/renewed certificate. To
reproduce:

Build a jar that contains an applet that calls code in another jar. Sign the
first jar with a NOS certificate. In my case this certificate expired on
5/20/2001. Build second jar with the renewed certificate.

When the applet loads it will ask to grant the first certificate correctly.
Once the applet call the code in the second jar it will display the grant
dialog without the buttons and the wrong size. The only option is to hit escape
or click the close box. This is the equivalent to clicking grant this session
only. In my full product this second dialog is blank and the JRE is locked. I
am unable as yet to reproduce this using a sample applet.

I have tested this using the following JRE's 1.3_01, 1.3_02 and 1.3.1rc2 with
the same result.

This is a critical problem in that I have multiple products installing into a
applet framework and am unable to resign all the jars.

I have sample jar files that reproduce this error.
(Review ID: 124844)
======================================================================