Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 856
  • Last Modified:

java 1.7 security warning- an unsigned application

when I updated java version from 7.21 to 7.51 I start receiving a dialog box which says " an unsigned application from the location below is requesting permissions to run" with options "Run" or "cancel". When I click on Run application is started successfully.
Is there any way to remove this dialogbox?
What I have tried till now.
- lower java security settings to medium(it's the lowest level in my version of java)
- add website to security list exceptions in java control panel(security tab)
- add website to trusted sites in IE
-check in IE - advanced -security- allow active content to run..,allow software to run or install ...
Till now I am not able to remove this dialogbox with security warning.
Please for help
javasecuritywarning
0
dedri
Asked:
dedri
  • 5
  • 2
  • 2
1 Solution
 
CEHJCommented:
One way is to sign it with a proper cert
0
 
Peter HutchisonSenior Network Systems SpecialistCommented:
Due to to the high number of security vunerabilities in Java Applets, this security dialog will always appear for unsigned Java applets.
As CEHJ says, the only way is to sign the Java applets with a proper certificate or downgrade your version of Java jre to an older version.
0
 
CEHJCommented:
or downgrade your version of Java jre to an older version.
Definitely not. That will leave your system vulnerable to malware. Java is right up at the top as a malware vector
0
Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

 
dedriAuthor Commented:
I know that with the older versions : 1.6 , dialogbox does not appear, but i don't want to downgrade.
Application is not supported by us so not possible to sign it.

Any other suggestion?
0
 
CEHJCommented:
Application is not supported by us so not possible to sign it.
That doesn't stop you signing it actually
0
 
Peter HutchisonSenior Network Systems SpecialistCommented:
Is the Java application on a server you maintain. It may then be possible to modify the application to get it signed. It depends whether the application is part of a jar (Java ARchive) file or just running the java class file.

Checkout the article below:
http://stackoverflow.com/questions/908748/how-do-i-sign-a-java-applet-for-use-in-a-browser

All you need is access to a JRE and Jdk and a valid certificate to allow you to sign it.
0
 
dedriAuthor Commented:
application is hosted on server which is not supported by us.
0
 
CEHJCommented:
Well you need to get it taken down, signed and put back up again
0
 
CEHJCommented:
It won't scale well, but you could also look at the policy file approach

http://docs.oracle.com/javase/tutorial/security/tour1/index.html

The thing is - there's so much in flux with applets at the moment that the above might not work - so be careful
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Upgrade your Question Security!

Your question, your audience. Choose who sees your identity—and your question—with question security.

  • 5
  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now