Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-7121725

security exception not thrown when signed applet statrted untrusted

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Cannot Reproduce
    • Icon: P2 P2
    • None
    • 6u29
    • deploy

      FULL PRODUCT VERSION :
      sdk 1.6.0_29, JRE 7

      ADDITIONAL OS VERSION INFORMATION :
      Win7 (does not matter)

      A DESCRIPTION OF THE PROBLEM :
      When the applet is not signed a security exception is thrown when opening a multicast socket. When the applet is signed the security exception is not thrown. So far so good. But when the applet is signed and the certificate will not be trusted (hitting the cancel button), the security exception still is not thrown. I think the applet should behave as if it is not signed.
      java.security.AccessControlException: access denied ("java.net.SocketPermission" "232.1.1.1" "connect,accept,resolve")


      REGRESSION. Last worked in version 7

      STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
      1) create applet that opens a multicast socket
      2) start the applet in a browser (does not matter which one)
      3) java.security.AccessControlException: access denied ("java.net.SocketPermission" "232.1.1.1" "connect,accept,resolve")
      gets thrown
      4) Sign the applet with a self signed ceritificate
      5) start the applet in a webbrowser and answer the certificate question with cancel. Security exception is not thrown.

      EXPECTED VERSUS ACTUAL BEHAVIOR :
      EXPECTED -
      Security exception should get thrown when the cancel button is hit.
      ACTUAL -
      Security exception is not thrown

      REPRODUCIBILITY :
      This bug can be reproduced always.

            Unassigned Unassigned
            webbuggrp Webbug Group
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Resolved:
              Imported:
              Indexed: