?
Solved

java 1.7 security warning- an unsigned application

Posted on 2014-03-12
9
Medium Priority
?
820 Views
Last Modified: 2014-04-29
when I updated java version from 7.21 to 7.51 I start receiving a dialog box which says " an unsigned application from the location below is requesting permissions to run" with options "Run" or "cancel". When I click on Run application is started successfully.
Is there any way to remove this dialogbox?
What I have tried till now.
- lower java security settings to medium(it's the lowest level in my version of java)
- add website to security list exceptions in java control panel(security tab)
- add website to trusted sites in IE
-check in IE - advanced -security- allow active content to run..,allow software to run or install ...
Till now I am not able to remove this dialogbox with security warning.
Please for help
javasecuritywarning
0
Comment
Question by:dedri
  • 5
  • 2
  • 2
9 Comments
 
LVL 86

Expert Comment

by:CEHJ
ID: 39922800
One way is to sign it with a proper cert
0
 
LVL 20

Accepted Solution

by:
Peter Hutchison earned 2000 total points
ID: 39922849
Due to to the high number of security vunerabilities in Java Applets, this security dialog will always appear for unsigned Java applets.
As CEHJ says, the only way is to sign the Java applets with a proper certificate or downgrade your version of Java jre to an older version.
0
 
LVL 86

Expert Comment

by:CEHJ
ID: 39922954
or downgrade your version of Java jre to an older version.
Definitely not. That will leave your system vulnerable to malware. Java is right up at the top as a malware vector
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 

Author Comment

by:dedri
ID: 39923220
I know that with the older versions : 1.6 , dialogbox does not appear, but i don't want to downgrade.
Application is not supported by us so not possible to sign it.

Any other suggestion?
0
 
LVL 86

Expert Comment

by:CEHJ
ID: 39923371
Application is not supported by us so not possible to sign it.
That doesn't stop you signing it actually
0
 
LVL 20

Expert Comment

by:Peter Hutchison
ID: 39923470
Is the Java application on a server you maintain. It may then be possible to modify the application to get it signed. It depends whether the application is part of a jar (Java ARchive) file or just running the java class file.

Checkout the article below:
http://stackoverflow.com/questions/908748/how-do-i-sign-a-java-applet-for-use-in-a-browser

All you need is access to a JRE and Jdk and a valid certificate to allow you to sign it.
0
 

Author Comment

by:dedri
ID: 39924677
application is hosted on server which is not supported by us.
0
 
LVL 86

Expert Comment

by:CEHJ
ID: 39926670
Well you need to get it taken down, signed and put back up again
0
 
LVL 86

Expert Comment

by:CEHJ
ID: 39926848
It won't scale well, but you could also look at the policy file approach

http://docs.oracle.com/javase/tutorial/security/tour1/index.html

The thing is - there's so much in flux with applets at the moment that the above might not work - so be careful
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently, I read that Microsoft has analysed statistics for their security intelligence report. It revealed: still, the clear majority of windows users do their daily work as administrator. An administrative account is a burden, security-wise. My ar…
Most folks would know the basics of how Dropbox works, so that’s not the purpose of this article. Security is what it’s all about, so here I’ll share how I choose to secure my Dropbox Account and the Data it contains.
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
Suggested Courses

615 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question