Java 7u45 : Application will be blocked in a future update

[nicolas.nastin]

Hi,

Since the last security update of Java (7u45), a message appears when launching JavaViewer.

This message says : This application will be blocked in a future Java security update because the JAR file manifest does not contain the Permission attribute.

On this image, there is the original french message and the equivalent english one :

This message appears on Windows 7 using Chrome with Java 7u45 (32bits) and using IE 10 with Java 7u45 (64bits).

Thanks,
Nicolas

[Rudi De Vos]

WE are already doing some test to see if signtool also does the trick for the java app.
But as it's new with 7u45, there isn't a lot of info on the net.

[Rudi De Vos]

looks like a special java certificat is needed 499$/year ç'!èéàç(!èéà(!èéà(!ç
The other certificat for exe/kernel authenticode signing is not valid for java..

[nicolas.nastin]

Hi Rudi,

Thanks for your answers.

Best regards

[wookstah]

So what does this mean for Java throwing errors/refusing to launch the Ultra VNC session because the security checks fail?

[Rudi De Vos]

Seems the windows certificat also works for java after using the correct syntax for it.
New manifest settings modified to get rid of thesome errors, but now we get other...

Still searching on how to avoid that a class is downloaded and not used from the jar file.
The new security rules don't allow you to download class files.

[Rudi De Vos]

Test server
http://www.uvnc.eu/1194/winvnc_java_singleport.zip

1)single port: The rfb is also the java port
you do not use 5900 and 5800, but the same port is used for both
Sample= if you set rfb to 80, you can connect with the browser to port 80
2) Java not signed and missing manifest should be corrected

[Rudi De Vos]

Any test results yet ?

[nicolas.nastin]

Hi Rudi,

Thanks for this version. It works. Warning appears only one time and it does not notice about being blocked in future update.

Sorry for being late... I went on holidays

Bye,
Nicolas