P3 Description
applet uses a set of third party jar files that have a JCE signature, so even if a customer wanted to use their own code signing credentials, and modify the manifest of the jars, they could not do this without invalidating the JCE signature. It is not reasonable to ask all customers to create JCE credentials so they can resign these third party jar files.
Need a solution to deal with these scenarios cleanly. Not just the JCE signature problem but the generic problem of people purchasing products that have applets in them. Many companies provide applets as part of a solution and not to force all customers to manually resign their jar files in order to make the necessary manifest changes that can’t do during the building of the applets.
Not be able to use DRS as solution and need an alternative.
Also, for customers that use the JTK and also want to have an explicit codebase/caller-allowable-codebase, there is no way for that to happen since any change in the manifest will require a new JCE signature, which they cannot do.
Request a solution to allow customers to use these settings without requiring a new JCE signature. A new applet signature would be fine, they would be able to do that, but they are unable to resign the jars to preserve the JCE signature.
Need a solution to deal with these scenarios cleanly. Not just the JCE signature problem but the generic problem of people purchasing products that have applets in them. Many companies provide applets as part of a solution and not to force all customers to manually resign their jar files in order to make the necessary manifest changes that can’t do during the building of the applets.
Not be able to use DRS as solution and need an alternative.
Also, for customers that use the JTK and also want to have an explicit codebase/caller-allowable-codebase, there is no way for that to happen since any change in the manifest will require a new JCE signature, which they cannot do.
Request a solution to allow customers to use these settings without requiring a new JCE signature. A new applet signature would be fine, they would be able to do that, but they are unable to resign the jars to preserve the JCE signature.