Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8009846

String for always accept does not match meaning of always in signed sandbox security dialog.

    XMLWordPrintable

Details

    • b82
    • Verified

    Backports

      Description

        Testing env: 32bit winxp, jre 8 nightly bundle #613

        Steps to reproduce:
        - launch app http://rehte.cn.oracle.com:8080/wshost/new_framework/new_framework/tests/javafx/manual/Preloader/html/SignedHelloPreloaderSandbox1.jnlp
        - There is a security dialog
        - Click "I accept... " and "Do not show..." checkbox on the dialog
        - Click Run button
        - Close the app
        - Launch another app http://rehte.cn.oracle.com:8080/wshost/new_framework/new_framework/tests/javafx/manual/Preloader/html/SignedHelloPreloaderSandbox2.jnlp
        The 2 apps have different href in jnlp file, so they should be considered to be different applications.
        - If there is no security dialog for the second app, bug is reproduced.

        Source code location:
        http://rehte.cn.oracle.com:8080/wshost/new_framework/new_framework/tests/javafx/manual/Preloader/src

        The behavior described above is correct. The meaning of always recently changed from "always for anything signed by this certificate" to "anything from this host signed by this certificate", but this text was wrong even before that, saying specifically "Do not show this again for this app".

        The String used for signed all-permission apps, "security.dialog.always" was properly changed to :
        "&Do not show this again for apps from the publisher and location above"
        but the value of "sandbox.security.dialog.always" did not change. It needs to - or it needs to be just removed, and the code referencing it in both DialogTemplate.java and JavaFX equivalent needs to be modified to just use the same always string for sandbox signed certificate dialog as for normal certificate dialog.
        The later solution would not need additional translations though it requires changing both Java and JavaFX code.

        Attachments

          Issue Links

            Activity

              People

                mhowe Mark Howe (Inactive)
                qgong Fred Gong (Inactive)
                Votes:
                0 Vote for this issue
                Watchers:
                5 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved: