Signing JavaScript html pages that contain applets

[Lloyd Colling]

Hi all,

I'm trying to sign a set of pages that include both javascript and
java applets. The javascript calls the applet methods using
liveconnect. Some of these methods require expanded privileges -
actions that need to break out of the sandbox.

I have been attempting to sign the pages, but hae met with limited
success. I have created a self-signed object signing key following the
instructions for doign so on the netscape developer site. I have then
gone to the directory below the directory containing the pages that I
wish to sign, and executed the command 'signtool -J -k testkey
secure', where testkey is my chosen alias for the object signing key
and secure is the directory containing the pages to be signed. The
output from this is:

-- BEGIN OUTPUT --
using certificate directory: /home/lloyd/.netscape
removing: secure//jscript.arc
removing: secure//services/mail/jscript.arc
removing: secure//services/jscript.arc

Generating inline signatures from HTML files in: secure/
Processing HTML file: Loading.html
Processing HTML file: LoggedOut.html
Processing HTML file: Login.html
Processing HTML file: Main_Intro.html
Processing HTML file: RecoverIdentity.html
Processing HTML file: index.html
Processing HTML file: services/ServiceList.html
Processing HTML file: services/mail/Blank.html
Processing HTML file: services/mail/ChangeSettings.html
Processing HTML file: services/mail/ForwardMail.html
Processing HTML file: services/mail/Inbox.html
Processing HTML file: services/mail/Login.html
Processing HTML file: services/mail/Navigation.html
Processing HTML file: services/mail/ReceivedMail.html
Processing HTML file: services/mail/ReplyMail.html
warning: secure//services/mail/jscript.arc/sendFunctions.js already
exists--will overwrite
Processing HTML file: services/mail/SendMail.html
warning: secure//services/mail/jscript.arc/sendFunctions.js already
exists--will overwrite
Processing HTML file: services/mail/index.html
Processing HTML file: services/management/ChangePassword.html
Processing HTML file: services/management/SelfManage.html
Processing HTML file: JarAppletPage.html
ERROR: Unable to open "secure//com.mycompany.myApplet.class" for
reading.
-- END OUTPUT --

The page referred to here (JarAppletPage.html) is the page containing
the java applets. The relevant applet tag in that html is:

-- BEGIN HTML--
<APPLET NAME="ManagedIDApplet" CODE="com.mycompany.myApplet.class"
WIDTH="30" HEIGHT="30" ARCHIVE="../applet/myApplet.jar">
        <!-- used for the logged in/out images -->
        <PARAM NAME="loggedInImageLocation"
value="http://192.168.2.101/secure/images/loggedin.gif";>
        <PARAM NAME="loggedOutImageLocation"
value="http://192.168.2.101/secure/images/notloggedin.gif";>
        <PARAM NAME="RedComponent" value="96">
        <PARAM NAME="GreenComponent" value="144">
        <PARAM NAME="BlueComponent" value="255">
</APPLET>
-- END HTML --

I've been searching for a solution to this for a while (actually, over
a week now...) and all the examples that I can findeither deal with
the newer jdk1.3 signing for the applet (it's currently signed using
the netscape signing tool as well, using the same key as is being used
here), or the examples only show the use of javascript and not
applets.

Thanks for any and all help,

--
Lloyd Colling