Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8027821

For signed jars without manifest "Permissions", there is still security warning dialog before Application Error (Or blocked) Dialog.

    XMLWordPrintable

Details

    • b01

    Backports

      Description

        Steps to reproduce:
        1. Install the latest 8 nightly (#645) on win7-x86
        2. import this cert to deployment Signer CA store so our apps will be regarded as valid CA-Signed: http://sqe-hgi.us.oracle.com/hg/index.cgi/8/deployment_int_ws/raw-file/5fe827854bc1/new_framework/lib/keyStore/valid_selfsigned_100year_keystore.cert
        3. access http://sqeweb.us.oracle.com/net/sqenfs-1/export1/comp/jsn/users/stephen/deployment_stuff/do.NOT.remove.me/bugs/lc_sqe_links/liveconnect/html/test_JS2SJ_Sandbox.html
        4. Note the main jar MixedCodeAppletTLCAC.jar is missing manifest "Permissions"
        5. If you see security warning dialog asking for if you want to "Run", then the issue is reproduced.

        Expected:
        The app should be directly blocked because of JDK-8025098.

        Also:
        1. the security warning dialog contains yellow warning saying that the jar missing manifest "Permissions" and will be blocked in a "future" JRE
        2. after you click "Run", the apps will abort with error in trace:
        ========
        Missing Application-Name manifest attribute for: http://localhost:8080/liveconnect/classes/MixedCodeAppletTLCAC.jar
        ========

        So actually #1 and #2 contradict each other.

        Attachments

          Issue Links

            backported by

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8038057 For signed jars without manifest "Permissions", there is still security warning dialog before Application Error (Or blocked) Dialog.

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8051404 For signed jars without manifest "Permissions", there is still security warning dialog before Application Error (Or blocked) Dialog.

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8051485 For signed jars without manifest "Permissions", there is still security warning dialog before Application Error (Or blocked) Dialog.

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8052941 For signed jars without manifest "Permissions", there is still security warning dialog before Application Error (Or blocked) Dialog.

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8060310 For signed jars without manifest "Permissions", there is still security warning dialog before Application Error (Or blocked) Dialog.

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8060564 For signed jars without manifest "Permissions", there is still security warning dialog before Application Error (Or blocked) Dialog.

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8132828 For signed jars without manifest "Permissions", there is still security warning dialog before Application Error (Or blocked) Dialog.

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8037526 For signed jars without manifest "Permissions", there is still security warning dialog before Application Error (Or blocked) Dialog.

            • P3 - Major loss of function.
            • Closed

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8049113 For signed jars without manifest "Permissions", there is still security warning dialog before Application Error (Or blocked) Dialog.

            • P3 - Major loss of function.
            • Closed
            duplicates

            Bug - A problem which impairs or prevents the functions of the product. JDK-8029245 "Security Information" dialog shows up instead of "Application Blocked" when load signed apps whose jar is without "Permissions" attribute in manifest at High/VeryHigh level

            • P3 - Major loss of function.
            • Resolved

            Bug - A problem which impairs or prevents the functions of the product. JDK-8027862 Regression: Security warning is shown instead of Application Blocked dialog if permissions attribute is missing

            • P2 - Crashes, loss of data, severe memory leak.
            • Resolved

            Bug - A problem which impairs or prevents the functions of the product. JDK-8028065 Security dialog in Java Web Start is shown before blocking dialog when main jar is missing permissions attribute

            • P3 - Major loss of function.
            • Resolved

            Bug - A problem which impairs or prevents the functions of the product. JDK-8031998 7u51 still shows Applet Security Warnings talks about "blocked in future version"

            • P3 - Major loss of function.
            • Closed
            relates to

            Bug - A problem which impairs or prevents the functions of the product. JDK-8028065 Security dialog in Java Web Start is shown before blocking dialog when main jar is missing permissions attribute

            • P3 - Major loss of function.
            • Resolved

            Activity

              People

                herrick Andy Herrick (Inactive)
                stephenh Stephen Hu (Inactive)
                Votes:
                0 Vote for this issue
                Watchers:
                11 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved: