Links

Lists

Latest Updates

Ruby On Rails List
Python list
Advanced Java
The JavaScript List
Apache Users
Full Disclosure
Linux Security

Search the archives!


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Instantiating a SecureRandom object from an applet


  • From: VShun@xxxxxxxxxxx (Shun, Vadim)
  • Subject: Instantiating a SecureRandom object from an applet
  • Date: Wed, 29 Sep 1999 10:26:35 -0400

Netscape has their own security domain model, it is not enough to use
standard Java security with Navigator. 
(Explorer is more Java compliant, it works "by the book" regarding security
)
To enable security with Netscape, you need to use their API in addition to
"normal" signing of your applet. Read their documentation on security, then
you need to import their package and call it. 

Vadim Shun.


-----Original Message-----
From: Perry L. Yin [mailto:pyin@xxxxxxxxxxxx]
Sent: Wednesday, September 29, 1999 10:12 AM
To: advanced java
Subject: Instantiating a SecureRandom object from an applet 


Instantiating a SecureRandom object from an applet in Communicator 4.6.1

caused the following exception.  There's no error when running the
applet in IE 5 however.

java.lang.ExceptionInInitializerError:
netscape.security.AppletSecurityException: security.checkpropsaccess.key

#  UniversalPropertyRead privilege not enabled: Reading information
stored in your computer, such as your user name
  at java.security.MessageDigest.getInstance(MessageDigest.java:138)
  at java.security.SecureRandom.<init>(SecureRandom.java:111)
  at
progress.message.security.ProgressSecureRandom.<init>(ProgressSecureRandom.j
ava:82)

.....

The problem appears to be the applet has no permission to access the
security property
file java.security in order to find out which security provider has the
SHA-1 implementation
required for creating the SecureRandom object.   Any help is very much
appreciated.

Perry


---
To unsubscribe, mail advanced-java-unsubscribe@xxxxxxxxxxxxxxxx
To get help, mail advanced-java-help@xxxxxxxxxxxxxxxx

---
To unsubscribe, mail advanced-java-unsubscribe@xxxxxxxxxxxxxxxx
To get help, mail advanced-java-help@xxxxxxxxxxxxxxxx