build - merlin beta2 76
browser - NS
OS - Solaris


Steps to reproduce -

1) Install the jre on the target machine.

2) Remove the .java.policy file from $HOME

3) Go to the https test cases at
http://sqesvr/deployment2/vmanda/latestws/doc/proc/JPI_https.html

4) The following test cases for Apache Web Server are throwing java.security.AccessControlException.

test 1 - http://10.5.26.48/https/tests/GP.html

test 2 - https://10.5.26.48/https/tests/GP.html

The exception message on the console is as follows -


Java(TM) Plug-in: Version 1.4.0
Using JRE version 1.4.0-beta3 Java HotSpot(TM) Client VM
User home directory = /home/ap122462
Proxy Configuration: Manual Configuration
     Proxy: http=scaweb1.sfbay.sun.com:8080,https=scaweb1.sfbay.sun.com:8080,ftp=scaweb1.sfbay.sun.com:8080
     Proxy Overrides:


----------------------------------------------------
c: clear console window
f: finalize objects on finalization queue
g: garbage collect
h: display this help message
l: dump classloader list
m: print memory usage
o: trigger logging
p: reload proxy configuration
q: hide console
r: reload policy configuration
s: dump system properties
t: dump thread list
x: clear classloader cache
0-5: set trace level to <n>
----------------------------------------------------
http://10.5.26.48:8080/https/tests/GP.html
java.security.AccessControlException: access denied (java.net.SocketPermission 129.144.85.140:8080 connect,resolve)
at java.security.AccessControlContext.checkPermission(AccessControlContext.java:273)
at java.security.AccessController.checkPermission(AccessController.java:404)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:545)
at java.lang.SecurityManager.checkConnect(SecurityManager.java:1047)
at sun.plugin.net.protocol.http.HttpURLConnection.connectStep1(HttpURLConnection.java:176)
at sun.plugin.net.protocol.http.HttpURLConnection.connect(HttpURLConnection.java:141)
at sun.plugin.net.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:258)
at GP.getURL(GP.java:59)
at GP.start(GP.java:30)
at sun.applet.AppletPanel.run(AppletPanel.java:358)
at java.lang.Thread.run(Thread.java:539)
This is the Servlet URL:https://129.144.85.140:8443/servlet/post_only_Servlet



###@###.### 2001-09-12

Reopened the bug with the modified description. This bug was reproducible on merlin beta3 build-79.

Location of the bundles -
        /net/jdk.sfbay/export/disk6/promoted/jdk/1.4/beta3/b79/bundles

This bug is documented in the release notes for merlin beta2. For more information, please go to -

             http://java.sun.com/j2se/1.4/relnotes.html#plugin

For Java Plug-In, the following has been documented.


A bug in the Java Plug-in's HTTPS support will cause a java.security.AccessControlException to be thrown when connecting to the host. This problem is present on Linux and Solaris operating environments. See bug report 4493088 for the latest information on this problem.



###@###.### 2001-09-14

It was earlier reproducible with build merlin beta3 build 79 and after the servers were restarted, the bug is not reproducible with b79. This bug is reproducible with merlin beta3 build-78.