10 Replies Latest reply: Apr 11, 2012 11:44 PM by Zafar Iqbal RSS

    Java Runtime Security Warnings

    Zafar Iqbal
      Dear All,

      I have made changes in formweb.cfg file to use Java Runtime instead of Jinitiator.

      I am using Java 6 standard edition
      version 6 update 24

      but when my forms loads Java Runtime show warnings

      Java has discovered application components that could indicate a security concerns
      the application contains both signed and unsigned codes.

      formsweb.cfg config portion
      ===================
      archive=frmall.jar, rolloverbutton.jar, progressbar.jar, frmwebutil.jar, jacob.jar, DirectPrint.jar
      WebUtilArchive=frmwebutil.jar, jacob.jar
      jpi_classid=clsid:CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA
      jpi_codebase=/forms/sunplugin/j2re-1_4_2_12-windows-i586-p.exe#Version=1,6,0,30
      jpi_mimetype=application/x-java-applet
      WebUtilLogging=off
      WebUtilLoggingDetail=normal
      WebUtilErrorMode=Alert
      WebUtilDispatchMonitorInterval=5
      WebUtilTrustInternal=true
      WebUtilMaxTransferSize=16384
      baseHTMLjinitiator=webutiljpi.htm
      imagebase=DocumentBase
      logo=false
        • 1. Re: Java Runtime Security Warnings
          Fabian
          Hi Zafar,

          It's better if you find the root cause y are u getting these security warnings while opening the Oracle form,
          This can be achieved by enabling debug option through your Java Console

          Start-> Control Panel -> Java ->Advanced
          Open 'Java console' and select 'Show console'
          Open 'Debugging' and select all 3 options,click OK
          Start a fresh browser session and log in to Applications
          Start the function calling the Form reproducing the problem
          See that Java Console is also started and logs debug entries.

          Here you will come to know y ur getting these security warnings.

          As a work around.
          Start > Control Panel > Java> 'Advanced'
          Open 'Security' and 'Mixed code (sandbox vs. trusted) security verification'
          Select 'Enable - hide warning and run with protections'
          Select OK button to confirm the changes made

          Follow the metalink note
          How to diagnose and resolve "Java has discovered application components that could indicate a security concern" in Forms [ID 1120573.1]

          This will be helpful

          Regards
          Fabian
          • 2. Re: Java Runtime Security Warnings
            Zafar Iqbal
            Hi Fabian,

            thanks for you kind reply

            I have configured the Java as you advised. Java console is showing is lots of entries but i am unable to understand them.

            please help how can i understand them.


            Regards,

            Zafar
            • 3. Re: Java Runtime Security Warnings
              Fabian
              Hi Zafar,

              Have you tried the work around which i have mentioned on my previous post??

              Java console is showing is lots of entries but i am unable to understand them.
              Can you please post the last few lines from the Java console when you got Java Runtime Security Warnings while your opening the form.

              Regards
              Fabian
              • 4. Re: Java Runtime Security Warnings
                Zafar Iqbal
                Hi Fabian,

                Yes i have tried the work as you mentioned in you last post.

                here are the last few lines when i got the security warning message

                *===== Java console Last Few Lines ========*
                basic: Loaded image: jar:http://10.10.0.10:7778/forms/java/frmall.jar!/oracle/forms/icons/ellipsis.gif
                basic: Loaded image: jar:http://10.10.0.10:7778/forms/java/frmall.jar!/oracle/forms/icons/frame.gif
                network: Cache entry found [url: http://10.10.0.10:7778/forms/java/erpicons.jar, version: null] prevalidated=false/0
                network: Connecting http://10.10.0.10:7778/forms/java/erpicons.jar with proxy=DIRECT
                network: Connecting http://10.10.0.10:7778/forms/java/erpicons.jar with cookie "oracle.uix=0^^GMT+5:00; language=eng"
                network: ResponseCode for http://10.10.0.10:7778/forms/java/erpicons.jar : 304
                network: Encoding for http://10.10.0.10:7778/forms/java/erpicons.jar : null
                network: Disconnect connection to http://10.10.0.10:7778/forms/java/erpicons.jar
                cache: Reading Signers from 0 http://10.10.0.10:7778/forms/java/erpicons.jar | C:\Documents and Settings\zafar iqbal\Application Data\Sun\Java\Deployment\cache\6.0\29\60f0be9d-3a557a2f.idx
                network: No certificate info for unsigned JAR file: http://10.10.0.10:7778/forms/java/erpicons.jar
                network: No certificate info for unsigned JAR file: http://10.10.0.10:7778/forms/java/erpicons.jar
                cache: Read manifest for http://10.10.0.10:7778/forms/java/erpicons.jar: read=22 full=22
                • 5. Re: Java Runtime Security Warnings
                  Fabian
                  Hi Zafar,

                  Went through the security warning msgs which you have posted
                  network: No certificate info for unsigned JAR file: http://10.10.0.10:7778/forms/java/erpicons.jar

                  Sign the erpicons.jar file using sign_webutil

                  1. set PATH=$ORACLE_HOME\jdk\bin;

                  2. Sign erpicons.jar:
                  $ORACLE_HOME\forms\webutil\sign_webutil $ORACLE_HOME\forms\java\erpicons.jar

                  You can follow the below link for signing a specific jar file
                  http://www.oracle.com/technetwork/developer-tools/forms/signingjint13-133197.pdf
                  http://www.jobacle.nl/?p=280

                  Yes i have tried the work around as you mentioned in your last post.
                  Are u getting Java Runtime Security Warnings while using the work around??

                  Regards
                  Fabian
                  • 6. Re: Java Runtime Security Warnings
                    Zafar Iqbal
                    Hi Fabian,

                    Thanks a lot now it is working fine

                    Regards,

                    Zafar
                    • 7. Re: Java Runtime Security Warnings
                      Zafar Iqbal
                      Dear Fabian,

                      When I run the form that has subclass of webutil.olb It takes extra time in loading form when I enabled the debugging of Java then i found the following entries.
                      I think form is taking time at last line of following entries.

                      network: Connecting http://10.0.0.10:8889/forms/lservlet;jsessionid=c0a8003e22b948fadc55035c4c76a450fd26554b8c14 with proxy=DIRECT
                      network: Connecting http://10.0.0.10:8889/forms/lservlet;jsessionid=c0a8003e22b948fadc55035c4c76a450fd26554b8c14 with proxy=DIRECT
                      network: Connecting http://10.0.0.10:8889/forms/java/create.gif with proxy=DIRECT
                      basic: Loaded image: http://10.0.0.10:8889/forms/create.gif

                      I have a jar file erpicon.jar It has create.gif file and its size is 110 KB
                      according to your last post I have signed this jar file.

                      Regards,
                      Zafar Iqbal
                      • 8. Re: Java Runtime Security Warnings
                        Zafar Iqbal
                        Febian,

                        When form is loaded then following line appear in Java console.
                        cache: Reading Signers from 978 http://10.0.0.10:8889/forms/java/frmwebutil.jar | C:\Documents and Settings\abc\Application Data\Sun\Java\Deployment\cache\6.0\21\3cfcc115-469e42dd.idx

                        I am confused what to do

                        please help me i am so worried

                        Regards | Zafar
                        • 9. Re: Java Runtime Security Warnings
                          583146
                          You need to sign that jar file as well.
                          • 10. Re: Java Runtime Security Warnings
                            Zafar Iqbal
                            Frans

                            I have already singed frmwebutil.jar and jacob.jar jar files by the following method
                            C:\>keytool -genkey -dname "cn=Product Management, ou=Development Tools, o=Oracle, c=US" -alias webutil2 -keypass webutil2 -keystore C:\DevSuiteHome\certificates\keystore -storepass webutilpasswd -validity 365
                            C:\>keytool -list -keystore C:\DevSuiteHome\certificates\keystore -storepass webutilpasswd
                            C:\>jarsigner -keystore C:\DevSuiteHome\certificates\keystore -storepass webutilpasswd -keypass webutil2 C:\DevSuiteHome\forms\java\frmwebutil.jar webutil2
                            C:\>jarsigner -keystore C:\DevSuiteHome\certificates\keystore -storepass webutilpasswd -keypass webutil2 C:\DevSuiteHome\forms\java\jacob.jar webutil2
                            but behaviour is same.