Bug 65602 - signed secure applets konqueror
Summary: signed secure applets konqueror
Status: RESOLVED UNMAINTAINED
Alias: None
Product: konqueror
Classification: Applications
Component: kjava (show other bugs)
Version: unspecified
Platform: Slackware Linux
: VHI wishlist
Target Milestone: ---
Assignee: Konqueror Developers
URL:
Keywords:
: 49879 52901 58406 60180 61120 63661 65191 67414 108940 140272 (view as bug list)
Depends on:
Blocks:
 
Reported: 2003-10-06 15:49 UTC by Alberto Talamo
Modified: 2024-05-06 22:38 UTC (History)
12 users (show)

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Alberto Talamo 2003-10-06 15:49:34 UTC
Version:            (using KDE KDE 3.1.4)
Installed from:    Slackware Packages

digitally signed applets with certificate show a "applet fail" message. KDE3.1.4 and java 1.4.2
Comment 1 Thiago Macieira 2003-10-07 06:00:06 UTC
Signed applets and privileges are not implemented in KDE, therefore this is a new feature. 
Comment 2 Koos Vriezen 2003-11-08 02:35:20 UTC
*** Bug 60180 has been marked as a duplicate of this bug. ***
Comment 3 Koos Vriezen 2003-11-08 02:35:53 UTC
*** Bug 65191 has been marked as a duplicate of this bug. ***
Comment 4 Koos Vriezen 2003-11-08 02:38:07 UTC
*** Bug 63661 has been marked as a duplicate of this bug. ***
Comment 5 Koos Vriezen 2003-11-08 02:42:48 UTC
*** Bug 61120 has been marked as a duplicate of this bug. ***
Comment 6 Koos Vriezen 2003-11-08 02:59:46 UTC
*** Bug 52901 has been marked as a duplicate of this bug. ***
Comment 7 Koos Vriezen 2003-11-12 21:01:22 UTC
*** Bug 67414 has been marked as a duplicate of this bug. ***
Comment 8 Koos Vriezen 2004-01-09 00:26:30 UTC
*** Bug 49879 has been marked as a duplicate of this bug. ***
Comment 9 Koos Vriezen 2004-02-07 22:23:46 UTC
*** Bug 58406 has been marked as a duplicate of this bug. ***
Comment 10 Marco 2004-02-22 05:28:26 UTC
That's really bad! :-(

However I've just found a workaround, at least for my particular needs. I'm developing an appelt and I am interested in signed applets just because often the browsers grant them file system I/O permissions. I'm not particularly interested to identity certification features, since I'm developing an intranet application that will run in an firewalled network. 

If this is the case, you don't need signing, as browser user you just need to add this to  $HOME/.java.policy:

grant codeBase "http://our-intranet-server/*" {
        permission java.security.AllPermission;
};

(there are specific I/O permit however). This will work with konqueror too, BUT you need to go in Settings/Java and uncheck "use security manager". Maybe there is some specific .policy file that kjava read, but I couldn't find it and the whole java integration is really poorly documented.
Comment 11 Koos Vriezen 2004-02-29 12:08:56 UTC
Look for kjava.policy

Thanks for your concern for signed applets and documentation. There is work to do in this area and your contribution would be very welcome. Use kfm-devel@kde.org for sending patches documents or other ideas/improvements.
Comment 12 Albert Astals Cid 2004-07-27 19:20:33 UTC
Seems to work on kde 3.3 for me, can anyone confirm and close the bug?
Comment 13 danalien 2005-05-16 17:47:57 UTC
does this apply to BankID-functionality[1] for not working with konqueror?

My bank [2] supports the new swedish e-legitimation [1], and trying to login with
konqi fails as it doesn't pass the test [3] /*after one has changed 'Browser Ident' to 'Mozilla 1.6' ... enables javascript, java, plugns .... eg. the works that made it work with FireFox 1.0.*... */


1 - http://www.bankid.com   [english too...]
2 - http://www.sparbankenfinn.se
3 - http://www.sparbankenfinn.se/TestaDinDator/javatest3.html
Comment 14 danalien 2005-05-16 18:08:12 UTC
Marco, 

about the $HOME/.java.policy file...

can one add/modify/change the version too?  /*maybe it'll inure to use a diff. file, eg. .java.version ... but its all the same for me :) */

As my problem is (running the javatest3.html-url...) that it says (I translate):
The Version of your javaengine doesn't support the BankID-functionality. Read more in the FAQ...

while it passes the two other tests (OS & Webbrowser...)
Comment 15 Magnus Kessler 2005-05-16 20:29:51 UTC
danalien:

Have you tried setting Mac OX X / Safari as your user agent? This works for me. I get the login applet started up to the point where it asks me for credentials. Can't obviously go any further since I'm neither a customer nor have a BankID.

My configuration:

KDE 3.4
JDK1.5

in java runtime settins all check boxes are selected, including "use security manager" (which generates quite a few requests for security grants at startup of the applet), and "use KIO".

Comment 16 danalien 2005-05-16 21:53:46 UTC
Magnus, 

No, I didn't try the Mac OS X/Safari user agent  - and man do I feel a tad stupid for not doing so - I mean, Konqi & safari are like cousins ... :-)

But it worked for me in 3.3 too, with JDK (jre) 1.5.0.
Comment 17 Koos Vriezen 2005-07-25 23:54:54 UTC
*** Bug 108940 has been marked as a duplicate of this bug. ***
Comment 18 Koos Vriezen 2007-02-05 00:59:20 UTC
*** Bug 140272 has been marked as a duplicate of this bug. ***
Comment 19 Andreas Nordal 2011-02-09 18:55:01 UTC
When trying to use BankID with KHTML in Konqueror 4.5.5, the java applet never finishes loading, never shows, and never gives an indication of how long it is going to take. Switching to webkit pops up the usual java-styled security warning about running it. Clicking "Run" redirects the webpage to https://www.dnbnor.no/segp/gen/security/standarderror, telling me there was a technical error.
Comment 20 Christoph Cullmann 2024-05-06 21:05:38 UTC
Dear user,

KHTML (and KJS and all related Java/plugin infrastructure) was a long time more or less unmaintained and got removed in KF6.

Please migrate to use a QWebEngine based HTML component.

We will do no further fixes or improvements to the KF5 branches of these components beside important security fixes.

For security issues, please see:

https://kde.org/info/security/

Sorry that we did not fix this issue during the life-time of KHTML.

Greetings
Christoph Cullmann
Comment 21 johnelliottmartin 2024-05-06 21:38:45 UTC
wow, that was 21 years ago!

> On May 6, 2024, at 2:05 PM, Christoph Cullmann <bugzilla_noreply@kde.org> wrote:
> 
> https://bugs.kde.org/show_bug.cgi?id=65602
> 
> Christoph Cullmann <cullmann@kde.org> changed:
> 
>           What    |Removed                     |Added
> ----------------------------------------------------------------------------
>             Status|CONFIRMED                   |RESOLVED
>         Resolution|---                         |UNMAINTAINED
> 
> --- Comment #20 from Christoph Cullmann <cullmann@kde.org> ---
> Dear user,
> 
> KHTML (and KJS and all related Java/plugin infrastructure) was a long time more
> or less unmaintained and got removed in KF6.
> 
> Please migrate to use a QWebEngine based HTML component.
> 
> We will do no further fixes or improvements to the KF5 branches of these
> components beside important security fixes.
> 
> For security issues, please see:
> 
> https://kde.org/info/security/
> 
> Sorry that we did not fix this issue during the life-time of KHTML.
> 
> Greetings
> Christoph Cullmann
> 
> --
> You are receiving this mail because:
> You are on the CC list for the bug.