ansaurus

Question

Signed Java applet doesnt get permissions in Safari

Answer 1

A:

Has the user accepted full access for your applet in Safari? Sounds like the security manager kicking in.

Thorbjørn Ravn Andersen 2009-07-31 08:49:42

yes. the user said "trust this applet". and it doesnt work.I even think FF is behaving strangely, because I just tried it on IE7 and I've got the same results as in Safari...I must be doing something wrong...

Michael Siebert 2009-07-31 09:01:12

Please list the steps you take to prepare your jar file.

Thorbjørn Ravn Andersen 2009-07-31 12:56:12

Answer 2

A:

I remember having a similar problem in an older version of Safari (this was years ago), and the solution I found was adding a delay to the applet. It seemed Safari for some reason was allowing the applet to run before the user was given the "trust this applet" dialogue (other browsers would not start the applet until after the user granted or denied access). At that point the applet was not trusted and a security exception would occur. Even though the user would then allow trust, it was too late as the applet had already run and failed. I had to add a delay for safari, so it would not try doing anything that needed secure access until a period of time had passed, allowing the user to give access before the applet tried doing anything needing security access.

joe p 2009-07-31 18:34:07

Answer 3

+2 A:

Once you have your jar compiled and signed you should run the -verify option to ensure its signed properly.

If the verification is ok look at the installed certificates on your browsers. I haven't done anything in Safari only IE, but I imagine there is a place similar to I.E. where you can at least view the installed certificates. I would verify the certificate is installed.

Also make sure your code is running in a privileged block.

 String home = System.getProperty("user.home");

will always throw an error in 1.4 or higher. Unless you have edited the java.policy file for All Permissions

Try using this in combination with your signed jar.

 String home = (String) AccessController.doPrivileged(new PrivilegedAction() 
 {
      public Object run() 
      {
     return System.getProperty("user.home");
      }
 });

Knife-Action-Jesus 2009-07-31 20:13:31

this is exactly what i came up with. unfortunately, i had to do this at 6 places, each with different arguments to the run method (which takes no arguments) so i had to define 6 private inner classes.and coming from ruby, this really sucks :-)is there a way to "mark" the whole applet as privileged?anyways, why does this work in firefox without doPrivileged?

Michael Siebert 2009-08-01 10:58:09

No way to mark the entire applet as privileged unless you use a custom policy file, but that opens up allot of security issues and would require work on the client machines. Not sure why firefox handles this differently The security you are fighting here is in the JRE container and shouldn't be affected by the browser to my knowledge. If anyone knows more about this I would be curious.

Knife-Action-Jesus 2009-08-03 16:17:29

ansaurus

tags:

views:

answers:

Signed Java applet doesnt get permissions in Safari

related questions