-
Bug
-
Resolution: Fixed
-
P2
-
5.0u6, 6
-
b02
-
x86, sparc
-
solaris_10, windows_xp
-
Verified
Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build |
---|---|---|---|---|---|---|
JDK-2143836 | 7 | Dennis Gu | P2 | Resolved | Fixed | beta |
JDK-2143735 | 6u1 | Dennis Gu | P2 | Resolved | Fixed | b01 |
When policy use is enforced in java.policy
grant {
permission java.lang.RuntimePermission "usePolicy";
};
AND
a remote policy server is specified in java.security:
policy.url.2=https://aubing.germany/ourpolicy.policy
which grants an applet write permissions:
grant codebase "https://aubing.germany/writeFileApplet/writeFileApplet.jar"
{
permission java.io.FilePermission "<<ALL FILES>>", "read,execute,write";
permission java.util.PropertyPermission "user.home", "read";
};
THEN we see
- an AccessControlException on WinXP/IE
- a hang on Solaris/Firefox (Applet is being loaded)
If the SAME write permissions
grant codebase "https://aubing.germany/writeFileApplet/writeFileApplet.jar"
{
permission java.io.FilePermission "<<ALL FILES>>", "read,execute,write";
permission java.util.PropertyPermission "user.home", "read";
};
are specified in the java.policy file AND the remote policy server is
disabled in java security, THEN all is fine.
Side note: The root certificate is being stored as trusted CA in the browser
keystore and the browser keystore is being used.
- backported by
-
JDK-2143735 Signed applet hangs browser if a remote policy server is being used
- Resolved
-
JDK-2143836 Signed applet hangs browser if a remote policy server is being used
- Resolved
- duplicates
-
JDK-6495732 Policy keystore recursion problem loading SunMSCAPI provider
- Closed
- relates to
-
JDK-7093090 Reduce synchronization in java.security.Policy.getPolicyNoCheck
- Closed
-
JDK-7169257 Fix for 6424631 only partially ported to JDK 7 & JDK 8
- Closed
-
JDK-6895411 Regression: Applets are not honoring the remote policy URL
- Closed
-
JDK-2224385 Reduce synchronization in java.security.Policy.getPolicyNoCheck
- Closed