Bug 58406

Summary:	signed java applet from unknown signer causes applet to fail
Product:	[Applications] konqueror	Reporter:	johnelliottmartin
Component:	kjava	Assignee:	Konqueror Developers <konq-bugs>
Status:	RESOLVED DUPLICATE
Severity:	wishlist
Priority:	NOR
Version First Reported In:	4.0
Target Milestone:	---
Platform:	Mandrake RPMs
OS:	Linux
Latest Commit:		Version Fixed In:
Sentry Crash Report:

Description johnelliottmartin 2003-05-13 00:15:00 UTC

Version:           4.0 (using KDE 3.1.0)
Installed from:    Mandrake Linux Cooker i586 - Cooker
Compiler:          gcc version 3.2.2 (Mandrake Linux 9.1 3.2.2-3mdk)
OS:          Linux (i686) release 2.4.21-0.13mdk

after fooling around with this for a while, i finally figured out what the issue was. You can see what I'm talking about at:

http://131.252.134.185/javawebdav/

basically the problem is this. When i try to open the page in konqueror, and i have the java console going, i get this output:

Java VM version: 1.4.1_01
Java VM vendor:  Sun Microsystems Inc.
java.security.AccessControlException: access denied (java.util.PropertyPermission debug read)
	at java.security.AccessControlContext.checkPermission(AccessControlContext.java:270)
	at java.security.AccessController.checkPermission(AccessController.java:401)
	at java.lang.SecurityManager.checkPermission(SecurityManager.java:542)
	at java.lang.SecurityManager.checkPropertyAccess(SecurityManager.java:1291)
	at java.lang.System.getProperty(System.java:572)
	at edu.uci.ics.DAVExplorer.GlobalData.init(GlobalData.java:543)
	at edu.uci.ics.DAVExplorer.GlobalData.<init>(GlobalData.java:103)
	at edu.uci.ics.DAVExplorer.GlobalData.getGlobalData(GlobalData.java:126)
	at edu.uci.ics.DAVExplorer.AppletMain.start(AppletMain.java:69)
	at org.kde.kjas.server.KJASAppletStub.startApplet(KJASAppletStub.java:254)
	at org.kde.kjas.server.KJASAppletContext.startApplet(KJASAppletContext.java:200)
	at org.kde.kjas.server.KJASProtocolHandler.processCommand(KJASProtocolHandler.java:207)
	at org.kde.kjas.server.KJASProtocolHandler.commandLoop(KJASProtocolHandler.java:86)
	at org.kde.kjas.server.Main.main(Main.java:178)


when i open it in Mozilla, i am told that the applet is signed by some company and verified through some one else, and am presented with the option to allow the applet to run or to deny it. If i choose to allow it, the applet runs just fine. Could this sort of thing be included with konqueror too?

Comment 1 Thiago Macieira 2003-10-07 06:01:16 UTC

Signed applet handling is not implemented, therefore this is a wish, not a bug.

Comment 2 rlk 2004-02-07 03:06:20 UTC

Is there a roadmap for this? Signed applets (and the ability to grant additional permissions to them) are critical for a lot of VPN-type applications.  For me this is an absolute stopper to being able to use Konqueror for my day to day work.

Comment 3 Koos Vriezen 2004-02-07 22:23:37 UTC

No, there isn't a roadmap for it. I guess prompting a user with a dialog isn't that hard to implement. Most of the work will probably be the storage of approved signed certificates.
Unfortunately, I don't have a VPN or bank account to test it on and have no need for it.

*** This bug has been marked as a duplicate of 65602 ***