Arch Linux

not_sure

Member

Registered: 2012-12-01

Posts: 27

java security

I have websites that use java.  An example is ScreenConnect that I host.

When I connect to a remote computer, java runs and prompts with a security warning:

The application ScreenConnect from http://site/bin uses resources from the following remote locations:

http://site/bin
file:/tmp

Are you sure you want to run this application?

Here are the links it provides:

http://docs.oracle.com/javase/7/docs/te … pp_library
http://docs.oracle.com/javase/7/docs/te … eploy.html

I can simply click Yes and it runs.  But this is very very annoying on my zoneminder server with 11 cameras and 22 java security prompts.

I've looked into this and haven't found a solution that my brain is capable of comprehending.  I'm surprised I don't see posts on this.  Can someone shed some light here?

ewaller

Administrator

From: Pasadena, CA

Registered: 2009-07-13

Posts: 19,804

Re: java security

Which browser are you using?

---

Nothing is too wonderful to be true, if it be consistent with the laws of nature -- Michael Faraday
Sometimes it is the people no one can imagine anything of who do the things no one can imagine. -- Alan Turing
---
How to Ask Questions the Smart Way

not_sure

Member

Registered: 2012-12-01

Posts: 27

Re: java security

firefox, chromium, opera

ewaller

Administrator

From: Pasadena, CA

Registered: 2009-07-13

Posts: 19,804

Re: java security

Does this help for firefox?

---

Nothing is too wonderful to be true, if it be consistent with the laws of nature -- Michael Faraday
Sometimes it is the people no one can imagine anything of who do the things no one can imagine. -- Alan Turing
---
How to Ask Questions the Smart Way

not_sure

Member

Registered: 2012-12-01

Posts: 27

Re: java security

Negitive.  Java loads in the browsers. 

$# javaws ./Elsinore.ScreenConnect.Client-1.jnlp 
java.io.FileNotFoundException: http://support.com:8040/Bin/ClientIcon.axd?Icon=ApplicationIcon256
        at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
        at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57)
        at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
        at java.lang.reflect.Constructor.newInstance(Constructor.java:526)
        at sun.net.www.protocol.http.HttpURLConnection$6.run(HttpURLConnection.java:1675)
        at sun.net.www.protocol.http.HttpURLConnection$6.run(HttpURLConnection.java:1673)
        at java.security.AccessController.doPrivileged(Native Method)
        at sun.net.www.protocol.http.HttpURLConnection.getChainedException(HttpURLConnection.java:1671)
        at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1244)
        at net.sourceforge.jnlp.util.HttpUtils.consumeAndCloseConnection(HttpUtils.java:66)
        at net.sourceforge.jnlp.util.HttpUtils.consumeAndCloseConnectionSilently(HttpUtils.java:52)
        at net.sourceforge.jnlp.cache.ResourceTracker.getUrlResponseCodeWithRedirectonResult(ResourceTracker.java:907)
        at net.sourceforge.jnlp.cache.ResourceTracker.findBestUrl(ResourceTracker.java:955)
        at net.sourceforge.jnlp.cache.ResourceTracker.initializeResource(ResourceTracker.java:788)
        at net.sourceforge.jnlp.cache.ResourceTracker.processResource(ResourceTracker.java:628)
        at net.sourceforge.jnlp.cache.ResourceTracker.access$600(ResourceTracker.java:79)
        at net.sourceforge.jnlp.cache.ResourceTracker$Downloader$1.run(ResourceTracker.java:1235)
        at net.sourceforge.jnlp.cache.ResourceTracker$Downloader$1.run(ResourceTracker.java:1233)
        at java.security.AccessController.doPrivileged(Native Method)
        at net.sourceforge.jnlp.cache.ResourceTracker$Downloader.run(ResourceTracker.java:1233)
        at java.lang.Thread.run(Thread.java:744)
Caused by: java.io.FileNotFoundException: http://support.com:8040/Bin/ClientIcon.axd?Icon=ApplicationIcon256
        at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1624)
        at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:468)
        at net.sourceforge.jnlp.cache.ResourceTracker.getUrlResponseCodeWithRedirectonResult(ResourceTracker.java:903)
        ... 9 more

java.io.FileNotFoundException: http://support.com:8040/Bin/ClientIcon.axd?Icon=ApplicationIcon256
        at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
        at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57)
        at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
        at java.lang.reflect.Constructor.newInstance(Constructor.java:526)
        at sun.net.www.protocol.http.HttpURLConnection$6.run(HttpURLConnection.java:1675)
        at sun.net.www.protocol.http.HttpURLConnection$6.run(HttpURLConnection.java:1673)
        at java.security.AccessController.doPrivileged(Native Method)
        at sun.net.www.protocol.http.HttpURLConnection.getChainedException(HttpURLConnection.java:1671)
        at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1244)
        at net.sourceforge.jnlp.util.HttpUtils.consumeAndCloseConnection(HttpUtils.java:66)
        at net.sourceforge.jnlp.util.HttpUtils.consumeAndCloseConnectionSilently(HttpUtils.java:52)
        at net.sourceforge.jnlp.cache.ResourceTracker.getUrlResponseCodeWithRedirectonResult(ResourceTracker.java:907)
        at net.sourceforge.jnlp.cache.ResourceTracker.findBestUrl(ResourceTracker.java:955)
        at net.sourceforge.jnlp.cache.ResourceTracker.initializeResource(ResourceTracker.java:788)
        at net.sourceforge.jnlp.cache.ResourceTracker.processResource(ResourceTracker.java:628)
        at net.sourceforge.jnlp.cache.ResourceTracker.access$600(ResourceTracker.java:79)
        at net.sourceforge.jnlp.cache.ResourceTracker$Downloader$1.run(ResourceTracker.java:1235)
        at net.sourceforge.jnlp.cache.ResourceTracker$Downloader$1.run(ResourceTracker.java:1233)
        at java.security.AccessController.doPrivileged(Native Method)
        at net.sourceforge.jnlp.cache.ResourceTracker$Downloader.run(ResourceTracker.java:1233)
        at java.lang.Thread.run(Thread.java:744)
Caused by: java.io.FileNotFoundException: http://support.com:8040/Bin/ClientIcon.axd?Icon=ApplicationIcon256
        at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1624)
        at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:468)
        at net.sourceforge.jnlp.cache.ResourceTracker.getUrlResponseCodeWithRedirectonResult(ResourceTracker.java:903)
        ... 9 more

Codebase matches codebase manifest attribute, and  application is signed. Continuing. See: http://docs.oracle.com/javase/7/docs/technotes/guides/jweb/security/no_redeploy.html for details.

Last edited by not_sure (2014-04-17 17:37:08)

jwele

Member

Registered: 2012-07-03

Posts: 62

Re: java security

After activating Java for a site you may see a security prompt, asking you to confirm that you want to run Java, or a message such as "Application Blocked by Security Settings", with no option to run Java. These security prompts and messages come from Java itself, not from Firefox, and depend on the website and your security settings in the Java Control Panel.

Sounds like you need to change a setting in the Java Control Panel http://www.java.com/en/download/help/jc … ol%20panel

You may be able to open it with the command "jcrontrol"

not_sure

Member

Registered: 2012-12-01

Posts: 27

Re: java security

I don't see where I can find the packages that contains such a command.

I can't find a ControlPanel script in my java installation folder either.

not_sure

Member

Registered: 2012-12-01

Posts: 27

Re: java security

I didn't have the icedtea-doc package installed.

Apparently, this is the control panel. 

/usr/share/doc/icedtea-web/netx/net/sourceforge/jnlp/controlpanel/ControlPanel.html

I am further in my quest, yet I still remain clueless...

fland

Member

Registered: 2013-06-13

Posts: 6

Re: java security

Any solution to this yet? I'm using java openjdk 7 with the icedtea webplugin and this message is verry annyoing to recive every time.

OramahMaalhur

Member

From: Kiev, Ukraine

Registered: 2012-02-14

Posts: 15

Website

Re: java security

This is very annoying issue, it appears during the work with client-bank software of PrivatBank UA. Waiting for working solution too

---

Слава Україні!

beroal

Member

From: Ukraine

Registered: 2009-06-07

Posts: 325

Website

Re: java security

I added website hosting a Java program to "Java Control Panel/Security/Exception Site List". Java prompted for running it only once. Solved?

---

we are not condemned to write ugly code