JDK-6409601 : jarsigner in JDK 1.5.0_06 is not signed for execution - security warning dialog displayed Win. Vista
  • Type: Bug
  • Component: security-libs
  • Sub-Component: java.security
  • Affected Version: 5.0u6
  • Priority: P2
  • Status: Closed
  • Resolution: Duplicate
  • OS: windows_vista
  • CPU: x86
  • Submitted: 2006-04-06
  • Updated: 2014-02-27
  • Resolved: 2006-06-07
Related Reports
Duplicate :  
Description
http://www.netbeans.org/issues/show_bug.cgi?id=73487

Windows Vista, JDK 1.5.0_06
Steps to reproduce:
1) run from commandline on Win Vista jarsigner (in JDK 1.5.0_06 - but probably all 1.5)
2) security warning dialog (jarsigner is not signed for execution) pops up - you have to confirm you are sure you want to run it.
3) 1.6's jarsigner does not suffer with this.

Impact:
as described here:
http://www.netbeans.org/issues/show_bug.cgi?id=73487

Please fix this in 1.5.

Thanks Tomas Musil

Comments
EVALUATION The same bug still appears in 1.5.0_07. I've filed 6433689 to java/install
07-06-2006

EVALUATION It seems that most of the executables inside the $JDK1.5/bin directory is somehow "shielded" by Windows Vista. If you try to execute any of them, the system will pop out a warning dialog. I've attached an image here. The background window shows the JDK 1.6.0 installation, in which all executables are not "shielded". However, in the 1.5.0_06 installtion, you can see the shield symbol which is embedded in the normal file icon. Here you can also see the "Windows Security" dialog, which includes the line "Unknown Publisher". The image is also avilable at http://sceri.prc/~ww155710/images/warning.png
07-04-2006