JDK-4938222 : REGRESSION: VMInfo Applet fails to load, throws AccessControlException
  • Type: Bug
  • Component: deploy
  • Sub-Component: plugin
  • Affected Version: 5.0
  • Priority: P1
  • Status: Closed
  • Resolution: Duplicate
  • OS: solaris
  • CPU: generic
  • Submitted: 2003-10-15
  • Updated: 2003-11-03
  • Resolved: 2003-11-03
Related Reports
Duplicate :  
JDK-4649690 - Java Plug-in should consider time-of-signing when verifying signed jars
Description
Build: Tiger b24
Build Location: /net/mizu.sfbay/usr/re/jdk1.5.0/bundles/*

Platform: Solaris Sparc 9/10, Solaris x86 9

The VMInfo applet fail to load and it throws AccessControlException exception.
The same applet loads using Tiger b23 w/o any problem. 

This problem is observed with Mozilla 1.2.1, Netscape 7.0 browsers

Steps to reproduce -

1) Install jdk/jre 1.5.0 on the local machine from the above location

2) Make sure that there is no .java.policy file present in $HOME

3) Go to the VMInfo tests (Test no: 4) at
http://sqeweb.sfbay/deployment1/mantis_ws_plugin/doc/proc/JPI_bat.html

The VM info applet does not load and it throws the following exception

-------------------------------------------------------------------------

java.security.AccessControlException: access denied (java.util.PropertyPermission java.class.path read)
at java.security.AccessControlContext.checkPermission(Unknown Source)
at java.security.AccessController.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPropertyAccess(Unknown Source)
at vminfo.init(vminfo.java:45)
at sun.applet.AppletPanel.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)
-------------------------------------------------------------------------

please fix this.

###@###.### 2003-10-15
Comments
EVALUATION Possibly caused by 4935441. ###@###.### 2003-10-16 This is casued by timestamping RFE introduced by JSSE, we are using codeSigner object which include timestamping info. In order to make it work in Java plugin, the JPI caching has to be changed to record codeSigner object instead of certificate array object only. Without those changes, the Java plugin cache will break, so no security dialog box pop up, therefore the applet will run untrusted and you got those exception. The fixes has been done in RFE 4649690, so I will mark it as duplicate of RFE 4649690. ###@###.### 2003-11-03
03-11-2003