Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
I have had a brief search in StackOverflow, it seems that for a webstart application, if some of the JARs are signed and other are unsigned, it will end up treated as unsigned if unsigned code are accessed in call stack.
However, what if I only put resources (e.g. config files) in an unsigned JAR? (In fact I have some environment-dependent configs that I want to centralize in a separate JAR). If all other JARs containing “code” are signed, will it runs fine as signed application?
Unsigned Jars can be put in a sand-boxed extension and used by an app. that requests
j2ee-application-client-permissionsorall-permissions.To avoid the mixed code warning that this produces, see Deploying Signed Applications and Applets Securely Without a Mixed Code Warning.