This discussion is archived
10 Replies Latest reply: Apr 11, 2012 9:44 PM by Zafar Iqbal RSS

Java Runtime Security Warnings

Zafar Iqbal Newbie
Currently Being Moderated
Dear All,

I have made changes in formweb.cfg file to use Java Runtime instead of Jinitiator.

I am using Java 6 standard edition
version 6 update 24

but when my forms loads Java Runtime show warnings

Java has discovered application components that could indicate a security concerns
the application contains both signed and unsigned codes.

formsweb.cfg config portion
===================
archive=frmall.jar, rolloverbutton.jar, progressbar.jar, frmwebutil.jar, jacob.jar, DirectPrint.jar
WebUtilArchive=frmwebutil.jar, jacob.jar
jpi_classid=clsid:CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA
jpi_codebase=/forms/sunplugin/j2re-1_4_2_12-windows-i586-p.exe#Version=1,6,0,30
jpi_mimetype=application/x-java-applet
WebUtilLogging=off
WebUtilLoggingDetail=normal
WebUtilErrorMode=Alert
WebUtilDispatchMonitorInterval=5
WebUtilTrustInternal=true
WebUtilMaxTransferSize=16384
baseHTMLjinitiator=webutiljpi.htm
imagebase=DocumentBase
logo=false
  • 1. Re: Java Runtime Security Warnings
    Fabian Pro
    Currently Being Moderated
    Hi Zafar,

    It's better if you find the root cause y are u getting these security warnings while opening the Oracle form,
    This can be achieved by enabling debug option through your Java Console

    Start-> Control Panel -> Java ->Advanced
    Open 'Java console' and select 'Show console'
    Open 'Debugging' and select all 3 options,click OK
    Start a fresh browser session and log in to Applications
    Start the function calling the Form reproducing the problem
    See that Java Console is also started and logs debug entries.

    Here you will come to know y ur getting these security warnings.

    As a work around.
    Start > Control Panel > Java> 'Advanced'
    Open 'Security' and 'Mixed code (sandbox vs. trusted) security verification'
    Select 'Enable - hide warning and run with protections'
    Select OK button to confirm the changes made

    Follow the metalink note
    How to diagnose and resolve "Java has discovered application components that could indicate a security concern" in Forms [ID 1120573.1]

    This will be helpful

    Regards
    Fabian
  • 2. Re: Java Runtime Security Warnings
    Zafar Iqbal Newbie
    Currently Being Moderated
    Hi Fabian,

    thanks for you kind reply

    I have configured the Java as you advised. Java console is showing is lots of entries but i am unable to understand them.

    please help how can i understand them.


    Regards,

    Zafar
  • 3. Re: Java Runtime Security Warnings
    Fabian Pro
    Currently Being Moderated
    Hi Zafar,

    Have you tried the work around which i have mentioned on my previous post??

    Java console is showing is lots of entries but i am unable to understand them.
    Can you please post the last few lines from the Java console when you got Java Runtime Security Warnings while your opening the form.

    Regards
    Fabian
  • 4. Re: Java Runtime Security Warnings
    Zafar Iqbal Newbie
    Currently Being Moderated
    Hi Fabian,

    Yes i have tried the work as you mentioned in you last post.

    here are the last few lines when i got the security warning message

    *===== Java console Last Few Lines ========*
    basic: Loaded image: jar:http://10.10.0.10:7778/forms/java/frmall.jar!/oracle/forms/icons/ellipsis.gif
    basic: Loaded image: jar:http://10.10.0.10:7778/forms/java/frmall.jar!/oracle/forms/icons/frame.gif
    network: Cache entry found [url: http://10.10.0.10:7778/forms/java/erpicons.jar, version: null] prevalidated=false/0
    network: Connecting http://10.10.0.10:7778/forms/java/erpicons.jar with proxy=DIRECT
    network: Connecting http://10.10.0.10:7778/forms/java/erpicons.jar with cookie "oracle.uix=0^^GMT+5:00; language=eng"
    network: ResponseCode for http://10.10.0.10:7778/forms/java/erpicons.jar : 304
    network: Encoding for http://10.10.0.10:7778/forms/java/erpicons.jar : null
    network: Disconnect connection to http://10.10.0.10:7778/forms/java/erpicons.jar
    cache: Reading Signers from 0 http://10.10.0.10:7778/forms/java/erpicons.jar | C:\Documents and Settings\zafar iqbal\Application Data\Sun\Java\Deployment\cache\6.0\29\60f0be9d-3a557a2f.idx
    network: No certificate info for unsigned JAR file: http://10.10.0.10:7778/forms/java/erpicons.jar
    network: No certificate info for unsigned JAR file: http://10.10.0.10:7778/forms/java/erpicons.jar
    cache: Read manifest for http://10.10.0.10:7778/forms/java/erpicons.jar: read=22 full=22
  • 5. Re: Java Runtime Security Warnings
    Fabian Pro
    Currently Being Moderated
    Hi Zafar,

    Went through the security warning msgs which you have posted
    network: No certificate info for unsigned JAR file: http://10.10.0.10:7778/forms/java/erpicons.jar

    Sign the erpicons.jar file using sign_webutil

    1. set PATH=$ORACLE_HOME\jdk\bin;

    2. Sign erpicons.jar:
    $ORACLE_HOME\forms\webutil\sign_webutil $ORACLE_HOME\forms\java\erpicons.jar

    You can follow the below link for signing a specific jar file
    http://www.oracle.com/technetwork/developer-tools/forms/signingjint13-133197.pdf
    http://www.jobacle.nl/?p=280

    Yes i have tried the work around as you mentioned in your last post.
    Are u getting Java Runtime Security Warnings while using the work around??

    Regards
    Fabian
  • 6. Re: Java Runtime Security Warnings
    Zafar Iqbal Newbie
    Currently Being Moderated
    Hi Fabian,

    Thanks a lot now it is working fine

    Regards,

    Zafar
  • 7. Re: Java Runtime Security Warnings
    Zafar Iqbal Newbie
    Currently Being Moderated
    Dear Fabian,

    When I run the form that has subclass of webutil.olb It takes extra time in loading form when I enabled the debugging of Java then i found the following entries.
    I think form is taking time at last line of following entries.

    network: Connecting http://10.0.0.10:8889/forms/lservlet;jsessionid=c0a8003e22b948fadc55035c4c76a450fd26554b8c14 with proxy=DIRECT
    network: Connecting http://10.0.0.10:8889/forms/lservlet;jsessionid=c0a8003e22b948fadc55035c4c76a450fd26554b8c14 with proxy=DIRECT
    network: Connecting http://10.0.0.10:8889/forms/java/create.gif with proxy=DIRECT
    basic: Loaded image: http://10.0.0.10:8889/forms/create.gif

    I have a jar file erpicon.jar It has create.gif file and its size is 110 KB
    according to your last post I have signed this jar file.

    Regards,
    Zafar Iqbal
  • 8. Re: Java Runtime Security Warnings
    Zafar Iqbal Newbie
    Currently Being Moderated
    Febian,

    When form is loaded then following line appear in Java console.
    cache: Reading Signers from 978 http://10.0.0.10:8889/forms/java/frmwebutil.jar | C:\Documents and Settings\abc\Application Data\Sun\Java\Deployment\cache\6.0\21\3cfcc115-469e42dd.idx

    I am confused what to do

    please help me i am so worried

    Regards | Zafar
  • 9. Re: Java Runtime Security Warnings
    583146 Newbie
    Currently Being Moderated
    You need to sign that jar file as well.
  • 10. Re: Java Runtime Security Warnings
    Zafar Iqbal Newbie
    Currently Being Moderated
    Frans

    I have already singed frmwebutil.jar and jacob.jar jar files by the following method
    C:\>keytool -genkey -dname "cn=Product Management, ou=Development Tools, o=Oracle, c=US" -alias webutil2 -keypass webutil2 -keystore C:\DevSuiteHome\certificates\keystore -storepass webutilpasswd -validity 365
    C:\>keytool -list -keystore C:\DevSuiteHome\certificates\keystore -storepass webutilpasswd
    C:\>jarsigner -keystore C:\DevSuiteHome\certificates\keystore -storepass webutilpasswd -keypass webutil2 C:\DevSuiteHome\forms\java\frmwebutil.jar webutil2
    C:\>jarsigner -keystore C:\DevSuiteHome\certificates\keystore -storepass webutilpasswd -keypass webutil2 C:\DevSuiteHome\forms\java\jacob.jar webutil2
    but behaviour is same.

Legend

  • Correct Answers - 10 points
  • Helpful Answers - 5 points