Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-6424631

Signed applet hangs browser if a remote policy server is being used

    XMLWordPrintable

Details

    • b02
    • x86, sparc
    • solaris_10, windows_xp
    • Verified

    Backports

      Description

        Java Plugin 1.5.0 U6, Solaris and Windows
        When policy use is enforced in java.policy

        grant {
              permission java.lang.RuntimePermission "usePolicy";
        };

              AND

        a remote policy server is specified in java.security:

        policy.url.2=https://aubing.germany/ourpolicy.policy

        which grants an applet write permissions:

        grant codebase "https://aubing.germany/writeFileApplet/writeFileApplet.jar"
        {
           permission java.io.FilePermission "<<ALL FILES>>", "read,execute,write";
           permission java.util.PropertyPermission "user.home", "read";
        };

        THEN we see

        - an AccessControlException on WinXP/IE
        - a hang on Solaris/Firefox (Applet is being loaded)


        If the SAME write permissions

        grant codebase "https://aubing.germany/writeFileApplet/writeFileApplet.jar"
        {
           permission java.io.FilePermission "<<ALL FILES>>", "read,execute,write";
           permission java.util.PropertyPermission "user.home", "read";
        };

        are specified in the java.policy file AND the remote policy server is
        disabled in java security, THEN all is fine.

        Side note: The root certificate is being stored as trusted CA in the browser
        keystore and the browser keystore is being used.

        Attachments

          Issue Links

            Activity

              People

                mbankal Mala Bankal (Inactive)
                tviessma Thomas Viessmann (Inactive)
                Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved:
                  Imported:
                  Indexed: