Solved

java 1.7 security warning- an unsigned application

Posted on 2014-03-12
9
788 Views
Last Modified: 2014-04-29
when I updated java version from 7.21 to 7.51 I start receiving a dialog box which says " an unsigned application from the location below is requesting permissions to run" with options "Run" or "cancel". When I click on Run application is started successfully.
Is there any way to remove this dialogbox?
What I have tried till now.
- lower java security settings to medium(it's the lowest level in my version of java)
- add website to security list exceptions in java control panel(security tab)
- add website to trusted sites in IE
-check in IE - advanced -security- allow active content to run..,allow software to run or install ...
Till now I am not able to remove this dialogbox with security warning.
Please for help
javasecuritywarning
0
Comment
Question by:dedri
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 2
  • 2
9 Comments
 
LVL 86

Expert Comment

by:CEHJ
ID: 39922800
One way is to sign it with a proper cert
0
 
LVL 19

Accepted Solution

by:
Peter Hutchison earned 500 total points
ID: 39922849
Due to to the high number of security vunerabilities in Java Applets, this security dialog will always appear for unsigned Java applets.
As CEHJ says, the only way is to sign the Java applets with a proper certificate or downgrade your version of Java jre to an older version.
0
 
LVL 86

Expert Comment

by:CEHJ
ID: 39922954
or downgrade your version of Java jre to an older version.
Definitely not. That will leave your system vulnerable to malware. Java is right up at the top as a malware vector
0
The Ultimate Checklist to Optimize Your Website

Websites are getting bigger and complicated by the day. Video, images, custom fonts are all great for showcasing your product/service. But the price to pay in terms of reduced page load times and ultimately, decreased sales, can lead to some difficult decisions about what to cut.

 

Author Comment

by:dedri
ID: 39923220
I know that with the older versions : 1.6 , dialogbox does not appear, but i don't want to downgrade.
Application is not supported by us so not possible to sign it.

Any other suggestion?
0
 
LVL 86

Expert Comment

by:CEHJ
ID: 39923371
Application is not supported by us so not possible to sign it.
That doesn't stop you signing it actually
0
 
LVL 19

Expert Comment

by:Peter Hutchison
ID: 39923470
Is the Java application on a server you maintain. It may then be possible to modify the application to get it signed. It depends whether the application is part of a jar (Java ARchive) file or just running the java class file.

Checkout the article below:
http://stackoverflow.com/questions/908748/how-do-i-sign-a-java-applet-for-use-in-a-browser

All you need is access to a JRE and Jdk and a valid certificate to allow you to sign it.
0
 

Author Comment

by:dedri
ID: 39924677
application is hosted on server which is not supported by us.
0
 
LVL 86

Expert Comment

by:CEHJ
ID: 39926670
Well you need to get it taken down, signed and put back up again
0
 
LVL 86

Expert Comment

by:CEHJ
ID: 39926848
It won't scale well, but you could also look at the policy file approach

http://docs.oracle.com/javase/tutorial/security/tour1/index.html

The thing is - there's so much in flux with applets at the moment that the above might not work - so be careful
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
In this post we will be converting StringData saved within a text file into a hash table. This can be further used in a PowerShell script for replacing settings that are dynamic in nature from environment to environment.
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
Finding and deleting duplicate (picture) files can be a time consuming task. My wife and I, our three kids and their families all share one dilemma: Managing our pictures. Between desktops, laptops, phones, tablets, and cameras; over the last decade…

696 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question