JDK-6695642 : Adding an option in JRE installion to ask user whether pre-trusted sun extension certificate
  • Type: Enhancement
  • Component: install
  • Sub-Component: install
  • Affected Version: 6u10
  • Priority: P2
  • Status: Closed
  • Resolution: Duplicate
  • OS: windows
  • CPU: x86
  • Submitted: 2008-04-29
  • Updated: 2010-04-04
  • Resolved: 2008-06-20
Related Reports
Duplicate :  
JDK-6569795 - Don't present security dialog for Sun-signed binaries
Description
This RFE is part of RFE 6569795 and RFE 6671561:

We are going to pre-trust signed applet which signed by Sun Certificate. In order to know which certificate is issued by Sun, a new jurisdiction file need to be created in JDK workspace, the Java plugin will parse this file and know how to compare it with the certificate which sign the jar file.

We have decided to ask a new certificate from Verisign, which has OU="Java Signed Extensions", this jurisdiction file will include this information along with other attribution in certificate, such as "CN" and others.

The location of this jurisdiction file will be under $JRE/lib/security, the file name will be "trustedPublishers".

During JRE installation, an option will checked by default to install the above file into $JRE/lib/security directory, if user uncheck the checkbox, then this file won't be added into $JRE/lib/security, and the pre-trust feature won't be available to user.
Comments
EVALUATION We do not need a separate CR for this. I will fix it with Dennis as part of 6569795.
20-06-2008
EVALUATION We need to implement this RFE in 6u11.
11-06-2008
EVALUATION We need UE to give us mockups for what this should look like.
30-04-2008