Security Error when running from customer site
Posted: Mon Jun 01, 2015 7:56 pm
Using a self signed certificate.
Java 8_45
Firefox 38.0
I can deploy the applet to my localhost by putting the following in my exception site list and it runs fine. I do get the Security dialog about an untrusted applet.
http://localhost:8080/editor-1/
I'm trying to deploy to http://www.mbepapers.org:8080/editor-1/
Obviously I'm using a tomcat server for both deployments, the editor applet is talking to a JSP server webapp and visa versa using local storage on the clients.
I have both in the exception site list
http://mbepapers.org:8080/editor-1/
http://www.mbepapers.org:8080.editor-1/
Its a very long output in the java console at level 5 output. All the jars pass security except my editor, which originally was oxygen-sample-applet-1.0.....
My generated mbep.jnlp file truncated in the middle for brevity
how I call the applet
I've tried putting the html file name and the jnlp file name in the exception site list but that made no difference.
What am I doing wrong?
Java 8_45
Firefox 38.0
I can deploy the applet to my localhost by putting the following in my exception site list and it runs fine. I do get the Security dialog about an untrusted applet.
http://localhost:8080/editor-1/
I'm trying to deploy to http://www.mbepapers.org:8080/editor-1/
Obviously I'm using a tomcat server for both deployments, the editor applet is talking to a JSP server webapp and visa versa using local storage on the clients.
I have both in the exception site list
http://mbepapers.org:8080/editor-1/
http://www.mbepapers.org:8080.editor-1/
Its a very long output in the java console at level 5 output. All the jars pass security except my editor, which originally was oxygen-sample-applet-1.0.....
later on in the console output here is where it denies running the applet.cache: Cancel delay cleanup: URL: http://www.mbepapers.org:8080/editor-1/ ... APSHOT.jar | /home/scott/.java/deployment/cache/6.0/27/4ee9c91b-1794b401.idx
cache: registerReference: com.sun.deploy.cache.MemoryCache$CachedResourceReference@119d10cc: 2
java.lang.SecurityException: JAR manifest application-library-allowable-codebase mismatch for http://www.mbepapers.org:8080/editor-1/ ... APSHOT.jar
at com.sun.deploy.security.DeployManifestChecker.verify(Unknown Source)
at com.sun.deploy.security.DeployManifestChecker.verify(Unknown Source)
at com.sun.javaws.security.AppPolicy.grantUnrestrictedAccess(Unknown Source)
at com.sun.javaws.security.JNLPSignedResourcesHelper.checkSignedResourcesHelper(Unknown Source)
at com.sun.javaws.security.JNLPSignedResourcesHelper.checkSignedResources(Unknown Source)
at sun.plugin2.applet.JNLP2Manager.prepareLaunchFile(Unknown Source)
at sun.plugin2.applet.JNLP2Manager.loadJarFiles(Unknown Source)
at sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Unknown Source)
at java.lang.Thread.run(Thread.java:745)
basic: null
My default properties for the jnlp sectionpreloader: Delivering: ErrorEvent[url=http://www.mbepapers.org:8080/editor-1/mbep.jnlp label=The Java security settings have prevented this application from running. You may change this behavior in the Java Control Panel. cause=The Java security settings have prevented this application from running. You may change this behavior in the Java Control Panel.
preloader: Enqueue: com.sun.javaws.progress.PreloaderDelegate$4@644285aa
basic: exception: The Java security settings have prevented this application from running. You may change this behavior in the Java Control Panel..
ExitException[ 3]com.sun.deploy.security.BlockedException: The Java security settings have prevented this application from running. You may change this behavior in the Java Control Panel.
at sun.plugin2.applet.JNLP2Manager.prepareLaunchFile(Unknown Source)
at sun.plugin2.applet.JNLP2Manager.loadJarFiles(Unknown Source)
at sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Unknown Source)
preloader: Preloader shutdown after ErrorEvent
at java.lang.Thread.run(Thread.java:745)
preloader: Stop progressCheck thread queue.size()=0
Ignored exception: ExitException[ 3]com.sun.deploy.security.BlockedException: The Java security settings have prevented this application from running. You may change this behavior in the Java Control Panel.
ui: Show default error panel
Code: Select all
# JNLP
#
#
# The main class to be set in the JNLP file.
mainclass=myGroup.mbepEditorApplet
# The code base to be set in the JNLP file.
#codebase=http://localhost:8080/editor-1/
codebase=http://www.mbepapers.org:8080/editor-1/
Code: Select all
<?xml version="1.0" encoding="UTF-8"?><jnlp spec="1.0+" codebase="http://www.mbepapers.org:8080/editor-1/" href="http://www.mbepapers.org:8080/editor-1/mbep.jnlp">
<!-- The tokens marked with @@ and the DEPENDENCIES element are replaced by Ant/Maven with the correct values-->
<information>
<title>MBEP Editor Applet</title>
<vendor>Mary Baker Eddy Library</vendor>
<homepage href="http://www.mbepapers.org/"/>
<description>MBEP Editor Applet</description>
<description kind="short">Editor</description>
</information>
<security>
<all-permissions/>
</security>
<resources>
<!-- Application Resources -->
<j2se java-vm-args="-Xmx256m -XX:MaxPermSize=80m" version="1.6+"/>
<jar href="lib/mbep-editor-applet-1.0-SNAPSHOT.jar" main="true"/>
<jar href="lib/batik-anim-1.7.jar"/>
<jar href="lib/oxygen-saxon9he-17.0.0.jar"/>
.......
<jar href="lib/oxygen-xercesImpl-17.0.0.jar"/>
</resources>
<applet-desc name="MBEP-Editor-Applet" main-class="myGroup.mbepEditorApplet" width="800" height="600">
</applet-desc>
<update check="always"/>
</jnlp>
Code: Select all
<applet code="myGroup.mbepEditorApplet" width="800" height="600">
<param name="java_arguments" value="-Xmx256m -XX:MaxPermSize=80m"/>
<param name="java_version" value="1.6+" />
<param name="jnlp_href" value="mbep.jnlp" />
<param name="AppletID" value="ApplId" />
<param name="classloader_cache" value="false" />
<param name="separate_jvm" value="true" />
<!--<param name="addHelperViews" value="true"/>
Uncomment the following line for full debug
<param name="loggerLevel" value="debug"/> -->
</applet>
What am I doing wrong?