Unfortunately, the only way to run this code is to sign your JAR.
(Well, I haven't really investigated the options with Netscape 6, but that
was certainly the case with Netscape 4 and IE 3-5).  In order to sign your
JAR, you need to have a certificate.  Since JBoss doesn't support Java 1.1
and that's all that the browsers support (pre-NS6), you need to use the
Java Plug-in.  That being the case, you can't get a code-signing
certificate for NS or IE, but must get one for Java.  You can buy a real
Java code-signing certificate from Thawte (www.thawte.com), and if you buy
elsewhere be sure to get a DSA certificate instead of an RSA certificate
(regardless of what you read in Sun's documentation).  You may also be
able to create a fake certificate for development and testing, if you
manually install it as trusted on the clients you want to use (they only
automatically trust real certificates from Verisign, Thawte, etc.).
        In any case, once you have your certificate, you can sign any JAR
with the jarsigner tool that ships with the JDK.  Then when the plug-in
loads the JAR, it'll pop up a little dialog asking whether to accept the
certificate once or always or reject it, and if they accept it your applet
gets full permissions.
        Finally, it may be the case that with enough attention we could
create a client package that runs safely on applets under the 1.3 plug-in,
so long as JBoss runs on the same machine as the web server.  If you have
some time to spend you might investigate this... :)

Aaron

On Fri, 8 Dec 2000, PREL - Novice Hwang wrote:
> Hello,
>   I am new to Jboss and also Java. I download the Jboss 2.0 final and tried
> to run the interest EJB sample. It works fine when I run the Java
> application client. When I tried to convert the client program to applet, I
> got the following security error :
>
>   java.security.AccessControlException: access denied
> (java.lang.RuntimePermission createClassLoader)
>
> when execute the  lookup("interest/Interest") statement.
>
> Can some one tell me how to resolve it?



--
--------------------------------------------------------------
To subscribe:        [EMAIL PROTECTED]
To unsubscribe:      [EMAIL PROTECTED]
Problems?:           [EMAIL PROTECTED]

Reply via email to