-
Bug
-
Resolution: Cannot Reproduce
-
P3
-
None
-
7u45, 8
-
win7/x86/7u45
Test scenario to cover JDK-8023074: Negative test for behavior of mixed code scenario(A cert signed jar with manifest calling a cert signed jar without manifest)
* 1) Set security level to very high
* 2) All jar files in applet are cert signed
* 3) Main jar in applet is with all-permissions in manifest
* 4) Help jar is without permissions in manifest
* 5) Test app is requesting all-permissions
Expected behavior: App should be blocked
Steps to reproduce:
0 Install jre7u45 #273
1 Make sure your can access to internet or disable OCSP/CRL check from JCP
2 Set security level to very High from JCP->Security
3 Clear cache: javaws -uninstall
4 Launch cert singed FX applet: http://sqeweb.us.oracle.com/net/sqenfs-1/export1/comp/jsn/users/crystal/DO_NOT_REMOVE_ME/jrebug/mixedcode/html/CasignedMixedCode.html
5 There will be a valid security warning shows up. Click "Run"
6 A dialog with title "Application Blocked" shown up(See block-dialog-1.png from attachment). Clicking "OK".
7 If another dialog with title "Application Blocked for Security" shows up(See block-dialog-2.png from attachment)., then this issue is reproduced.
Note: for applet and jnlp application, there is only one blocked dialog.
Src: http://sqeweb.us.oracle.com/net/sqenfs-1/export1/comp/jsn/users/crystal/DO_NOT_REMOVE_ME/jrebug/mixedcode/src/SimpleMixedCode.java
http://sqeweb.us.oracle.com/net/sqenfs-1/export1/comp/jsn/users/crystal/DO_NOT_REMOVE_ME/jrebug/mixedcode/src/HelperClass1.java
* 1) Set security level to very high
* 2) All jar files in applet are cert signed
* 3) Main jar in applet is with all-permissions in manifest
* 4) Help jar is without permissions in manifest
* 5) Test app is requesting all-permissions
Expected behavior: App should be blocked
Steps to reproduce:
0 Install jre7u45 #273
1 Make sure your can access to internet or disable OCSP/CRL check from JCP
2 Set security level to very High from JCP->Security
3 Clear cache: javaws -uninstall
4 Launch cert singed FX applet: http://sqeweb.us.oracle.com/net/sqenfs-1/export1/comp/jsn/users/crystal/DO_NOT_REMOVE_ME/jrebug/mixedcode/html/CasignedMixedCode.html
5 There will be a valid security warning shows up. Click "Run"
6 A dialog with title "Application Blocked" shown up(See block-dialog-1.png from attachment). Clicking "OK".
7 If another dialog with title "Application Blocked for Security" shows up(See block-dialog-2.png from attachment)., then this issue is reproduced.
Note: for applet and jnlp application, there is only one blocked dialog.
Src: http://sqeweb.us.oracle.com/net/sqenfs-1/export1/comp/jsn/users/crystal/DO_NOT_REMOVE_ME/jrebug/mixedcode/src/SimpleMixedCode.java
http://sqeweb.us.oracle.com/net/sqenfs-1/export1/comp/jsn/users/crystal/DO_NOT_REMOVE_ME/jrebug/mixedcode/src/HelperClass1.java