Brian, the basic principle is that signing applet code causes the browser to prompt the user for the privileges that the code needs; the browser denies the privileges to unsigned code without prompting. The browser & JVM have their own signature handling code and are independent of keytool etc; any web browser that can run an applet should be able to handle signed jars.
You can sign your own jars using a self-signed certificate as dims indicated. This works provided that the user running the applet in the browser decides to trust you as signatory. If they decide not to trust you, then the applet code doesn't get its network privs and the SOAP communication fails. If you sign the applet jars with a self-signed certificate, then the prompt for the network privileges warns that the certificate is not trusted. If you buy a jar-signing certificate from a well-known commercial CA, then the prompt says that your jars are from a trusted source. This may encourage your users to trust the applet. Cheers, Guy On Mon, 8 Aug 2005, Brian Abbott wrote: > Hi Dims, > > Thank you for the replies. If I use jarsigner/keytool, > wont users of the applet have to use keytool as well? > I'm not sure how applet-signing/loading/consumption > works. > > Brian > > --- Davanum Srinivas <[EMAIL PROTECTED]> wrote: > > > you can sign it yourself. no need for a cert. just > > use java keytool to > > generate a cert. > > > > -- dims > > > > On 8/8/05, Brian Abbott <[EMAIL PROTECTED]> > > wrote: > > > I looked through them. The only solid solution I > > read > > > there was to purchase a cert from a CA and sign > > all > > > jar files. > > > > > > isnt there another way around this issue? > > > > > > Thanks, > > > > > > Brian > > > > > > --- Davanum Srinivas <[EMAIL PROTECTED]> wrote: > > > > > > > plz check the email archives and issue tracker > > ... > > > > > > > > On 8/8/05, Brian Abbott > > <[EMAIL PROTECTED]> > > > > wrote: > > > > > Hi, > > > > > > > > > > I noticed last week that there where several > > posts > > > > > about running axis from an Applet. I am now > > trying > > > > to > > > > > do this and am running into the same problems. > > Was > > > > > anyone able to find a solution that works? > > > > > > > > > > Thanks, > > > > > > > > > > Brian > > > > > > > > > > > > __________________________________________________ > > > > > Do You Yahoo!? > > > > > Tired of spam? Yahoo! Mail has the best spam > > > > protection around > > > > > http://mail.yahoo.com > > > > > > > > > > > > > > > > > -- > > > > Davanum Srinivas > > -http://blogs.cocoondev.org/dims/ > > > > > > > > > > > > > __________________________________________________ > > > Do You Yahoo!? > > > Tired of spam? Yahoo! Mail has the best spam > > protection around > > > http://mail.yahoo.com > > > > > > > > > -- > > Davanum Srinivas -http://blogs.cocoondev.org/dims/ > > > > > __________________________________________________ > Do You Yahoo!? > Tired of spam? Yahoo! Mail has the best spam protection around > http://mail.yahoo.com > Guy Rixon [EMAIL PROTECTED] Institute of Astronomy Tel: +44-1223-337542 Madingley Road, Cambridge, UK, CB3 0HA Fax: +44-1223-337523
