Re: Win 7 - 1.7.0_07-b11 - InvalidKeyException - Wrong Key Usage on all applets
Posted by Sven Gothel on Sep 11, 2012; 3:06pm
URL: https://forum.jogamp.org/Win-7-1-7-0-07-b11-InvalidKeyException-Wrong-Key-Usage-on-all-applets-tp4026082p4026099.html
On 09/11/2012 03:54 PM, gouessej [via jogamp] wrote:
> Sven Gothel wrote
> On 09/11/2012 02:47 PM, Sven Gothel wrote:
> > On 09/11/2012 12:35 PM, Xerxes Rånby [via jogamp] wrote:
> >> Thank you gouessej!
> >>
> >> Enabeling online verification of certificates in the java control panel
> did
> >> fix this issue.
> >> Spot on!
> >
> > wow :)
> >
> > now waiting for the day when Oracle buries Java online 'features'
> altogether :)
> >
> > ~Sven
> >
>
> Just realized that this must be the new 'click to crash' feature :)
>
> The impact is that the general user is not only bothered with a 'click to
> play' button by the browser, but also that Oracle's 'official' JVM doesn't do
> any Applet w/ other 3rd party signed stuff per default.
>
> None of the vulnerabilities are actually about code signing itself.
>
> ~Sven
>
> What do you mean exactly? Will end users be forever forced to enable online
> certificate validation manually? I thought that it was just a temporary
> problem that would be fixed later...I don't know [about Oracle's future plans] .. just given a provocative
response to a phenomenon reported here.
Iff this is the new way of doing things in Oracle's JRE,
then it would be a lockout of 3rd party tools under certain deployment
situations (read: JNLP here .. as reported).
But again .. I don't know.
~Sven
URL: https://forum.jogamp.org/Win-7-1-7-0-07-b11-InvalidKeyException-Wrong-Key-Usage-on-all-applets-tp4026082p4026099.html
On 09/11/2012 03:54 PM, gouessej [via jogamp] wrote:
> Sven Gothel wrote
> On 09/11/2012 02:47 PM, Sven Gothel wrote:
> > On 09/11/2012 12:35 PM, Xerxes Rånby [via jogamp] wrote:
> >> Thank you gouessej!
> >>
> >> Enabeling online verification of certificates in the java control panel
> did
> >> fix this issue.
> >> Spot on!
> >
> > wow :)
> >
> > now waiting for the day when Oracle buries Java online 'features'
> altogether :)
> >
> > ~Sven
> >
>
> Just realized that this must be the new 'click to crash' feature :)
>
> The impact is that the general user is not only bothered with a 'click to
> play' button by the browser, but also that Oracle's 'official' JVM doesn't do
> any Applet w/ other 3rd party signed stuff per default.
>
> None of the vulnerabilities are actually about code signing itself.
>
> ~Sven
>
> What do you mean exactly? Will end users be forever forced to enable online
> certificate validation manually? I thought that it was just a temporary
> problem that would be fixed later...
response to a phenomenon reported here.
Iff this is the new way of doing things in Oracle's JRE,
then it would be a lockout of 3rd party tools under certain deployment
situations (read: JNLP here .. as reported).
But again .. I don't know.
~Sven
signature.asc (907 bytes) | Free forum by Nabble | Edit this page |