JDK-8159453 : Security settings block an untrusted application from running in 7u101
  • Type: Bug
  • Component: deploy
  • Sub-Component: webstart
  • Affected Version: 7u101
  • Priority: P3
  • Status: Closed
  • Resolution: Duplicate
  • Submitted: 2016-06-14
  • Updated: 2016-06-20
  • Resolved: 2016-06-20
Related Reports
Duplicate :  
JDK-8155076 - Webstart loads JARs from MANIFEST.MF after loading the jars from resources-tag
Description
Suddenly using Java 7 u101 we have an error message from client Windows PC
"Your security settings have blocked an untrusted application from running".
We are downloading a JNLP doing then a Java Web start.

We have a valid JAVA certificate and  we tested on a HTTPS self-signed as on a 
server with a valid APACHE certificate. In both cases we have this blocking issue. 
Until Java 7 u99 everything was working. If we add the HTTPS URL to the security
list the application is working.

Just to add that we are using 32 Java version on a 64bit Windows operating
system (2008/2012/8.1/10)
Comments
It was supposed that this issue could be related to the fact that the attribute "Class-Path" is used in "MANIFEST.MF" file of the user's application's JAR file, since it is known that certain fix integrated in JDK 8u91, JDK 7u101 and changing the code related to processing of "Class-Path" manifest attribute caused issues which are already resolved in JDK 7 by the next 2 existing fixes for the bugs: JDK-8155076, JDK-8157988. In order to check the described above assumption about a reason of the issue, the user was provided with the unofficial build of 32-bit JRE 7u101 for MS Windows OS with 2 already existing fixes: JDK-8155076, JDK-8157988. And the user confirmed that the issue could not be reproduced with the provided unofficial build of JRE 7u101. Closing the bug as a duplicate of JDK-8155076.
20-06-2016