Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-6234748

Nightly:Security Exception is not getting thrown for self signed applications

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: P2 P2
    • 6
    • 6
    • deploy
    • 6
    • b27
    • generic
    • generic
    • Verified

      JRE release : 1.6.0-b99
      Nightly Bundles location :
      /net/sqesvr-nfs/global/nfs/deployment5/pit_builds or
      /net/dig-dug.east/bigtmp/deployment/1.6.0/nightly/

      Problem Description:
      If the property "deployment.security.askgrantdialog.notinca" is set to false then the following exception should be getting thrown and there should not be any security pop-up but that's not what exactly happening with the nightly bundles. Infact security pop-up is coming by totally ignoring what value has been set against "deployment.security.askgrantdialog.notinca" inside the deployment.properties file

      Expected Exception message:
      java.security.cert.CertificateException: Your security configuration will not allow granting permission to new certificates
      at com.sun.deploy.security.TrustDecider.isAllPermissionGranted(Unknown Source)
      at com.sun.deploy.security.TrustDecider.isAllPermissionGranted(Unknown Source)
      .............................................
      ................................................

      Steps to reproduce:
      1) Install the JRE from the nightly location mentioned above
      2) Set "deployment.security.askgrantdialog.notinca" to false inside the deployment.properties directly
      OR
      Uncheck the following option in JCP
      JCP > Advanced > Security > Allow user to grant permissions to content from an untrusted authority
      Check the following entry inside the deployment.properties after doing the setting in JCP:
      deployment.security.askgrantdialog.notinca=false

      5)Load the following applet http://sqeweb.sfbay.sun.com/deployment1/deployment_tiger_exec_ws/deployment/tests/RSATestsuite/pluginhtml-default/Selfgrant.html

      If security pop-up is coming instead of throwing the above mentioned exception then the bug is reproduced

      The behavior is correct with promoted 1.6,1.5.0 and 1.5.0_03 bundles


      ###@###.### 2005-03-02 04:37:18 GMT

            dgu Dennis Gu (Inactive)
            jijising Jitender Singh (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved:
              Imported:
              Indexed: