Unexpected Security problem.

Post here questions and problems related to oXygen frameworks/document types.
sderrick
Posts: 264
Joined: Sat Jul 10, 2010 4:03 pm

Unexpected Security problem.

Post by sderrick »

running on Linux Mint 17
Java 8_45
Firefox 37

I've been developing and running the applet for a couple weeks with no security problems. It is self signed and I put the host site in the java exception list. For dev I've been running it off my localhost apache http and tomcat server.

Yesterday I moved the applet my clients server so they could test it in house. I got a security exception so put the address in the sitelist and it still didn't run. Thats odd I thought.

I then tried running it on my localhost server that has been fine for weeks and got the same exception! That's really odd I thought. I cleared the Java(8_45) cache, browser(firefox) cache, same result. rebuilt the applet same result. I only ran it to compare the console output of a successful load vs an unsuccessful load! What now?

Image

I then built the untouched oxygen sample applet mySample and tried to load that, same exception!

Image

In the java console during the applet loading I found two jars that may be causing the problem. I don't know because I never examined the log of a successful load of the applet?
cache: signed entry "javax/xml/namespace/" missing from jar http://127.0.0.1:8080/editor-1/lib/oxyg ... 17.0.0.jar
cache: signed entry "org/xml/sax/" missing from jar http://127.0.0.1:8080/editor-1/lib/oxyg ... 17.0.0.jar
cache: signed entry "javax/xml/validation/" missing from jar http://127.0.0.1:8080/editor-1/lib/oxyg ... 17.0.0.jar
cache: signed entry "javax/xml/datatype/" missing from jar http://127.0.0.1:8080/editor-1/lib/oxyg ... 17.0.0.jar
cache: signed entry "javax/xml/transform/" missing from jar http://127.0.0.1:8080/editor-1/lib/oxyg ... 17.0.0.jar
cache: signed entry "javax/xml/xpath/" missing from jar http://127.0.0.1:8080/editor-1/lib/oxyg ... 17.0.0.jar
cache: signed entry "javax/xml/parsers/" missing from jar http://127.0.0.1:8080/editor-1/lib/oxyg ... 17.0.0.jar
cache: signed entry "javax/xml/stream/" missing from jar http://127.0.0.1:8080/editor-1/lib/oxyg ... 17.0.0.jar
cache: Create from verifier: JarSigningData{hasOnlySignedEntries=true, hasSingleCodeSource=true, hasMissingSignedEntries=true}
and
cache: signed entry "org/apache/xmlcommons/Version" missing from jar http://localhost:8080/editor-1/lib/xml-apis-1.4.01.jar
cache: Create from verifier: JarSigningData{hasOnlySignedEntries=true, hasSingleCodeSource=true, hasMissingSignedEntries=true}
cache: Upgrade of entry done
I get the same entries in my applet and the sample applet

I'm at my wits end here.

here is the output of signing the oxygen-xerces jar. Its long so here is a link https://spideroak.com/storage/ONSGK4TSN ... 6e984728b4
sderrick
Posts: 264
Joined: Sat Jul 10, 2010 4:03 pm

Re: Unexpected Security problem.

Post by sderrick »

Just to be sure I tried to load the applet from another pc on my local network. It's running windoze 7 with a fresh install of Java 8_45

Same Java Security exception, same two jars listed in the console as missing signed elements?

Scott
sderrick
Posts: 264
Joined: Sat Jul 10, 2010 4:03 pm

SOLVED: Re: Unexpected Security problem.

Post by sderrick »

Pilot error, my bad. :shock:

I changed something in the default.properties file accidentally and caused the problem..

Scott
Radu
Posts: 9018
Joined: Fri Jul 09, 2004 5:18 pm

Re: Unexpected Security problem.

Post by Radu »

Hi Scott,

Glad you found the problem, thanks for updating the thread with the solution.

Regards,
Radu
Radu Coravu
<oXygen/> XML Editor
http://www.oxygenxml.com
Post Reply