Java Security Warning with latest Java 7 Update 21

User 7c93c0ac59

24-04-2013 06:26:58

Hi,


On computers running the latest Java version (Java 7 update 21), we are getting a mixed code warning (http://docs.oracle.com/javase/6/docs/technotes/guides/jweb/mixed_code.html) the first time we execute document.MSketch.getMol('cxsmiles'). I reproduced it on Windows XP / IE8 and Mac OS X 10.7 / (both Firefox 20 and Safari 6.04).



I was able to reproduce it on your example page at https://www.chemaxon.com/marvin/examples/applets/sketch/js_io.html. I opened firebug and typed the command "document.MSketch.getMol('cxsmiles');" and got the security popup (screenshot attached).


Any idea how to silence that warning?


Thanks,


David

ChemAxon 2c555f5717

24-04-2013 15:44:17

Dear Davidblondeau!


   Thank you for reporting this issue. Unfortunatelly Java 1.7_u21 requires some mor artifacts in signed jars than what we provied. We are working on the new signing mechanism, and we will proapbly ship it in this weak or in a weak. This is an unfortante case, we are up to solve it.


   You can set in your java settings not to warn you in cases like this, but I do not advise you for this, because mallicious applications can harm your computer. Please be patient, we are working hard on this.


Regards:
Balázs

User 7c93c0ac59

24-04-2013 16:10:14

Thank you Balázs,



Our application is currently integrating the 5.7.2 release (the oldest one with a valid certifcate). Are you planning on resigning that version?


Regards,


David

ChemAxon 2c555f5717

24-04-2013 16:26:23

Resignature will be done by the request of our costumers, and the possibilities of our company. I will forward your requst to the corresponding persons, and we will inform you about the decision.

ChemAxon 2c555f5717

24-04-2013 16:34:30

It was a quick decision: we try to do it in this weak.

User 7c93c0ac59

24-04-2013 17:15:19

Definitely appreciated.


Thanks,


David

User 870ab5b546

25-04-2013 00:41:46

Look on the bright side -- at least Apple is no longer disabling Java 7!  A warning the first time an applet is used in a browser session is a small price to pay.

ChemAxon 2c555f5717

25-04-2013 14:03:47

Dear David!


We have resigned the 5.7.2 applet, you can access it under the link:

https://www.chemaxon.com/download.php?d=/data/download/marvin/archives/marvin-bin-5.7.2-signed-patch.zip



Please note this is not a standalone package, only patch for the
original 5.7.2 applet package. It includes only the re-signed jar and
jar.pack.gz files.



Make a backup about the original directory before applying the patch.

To install it, extract the zip file in the directory of your Marvin
Applet package on your server. Let it overwrite files in this directory. 


Regards:
Balázs 

User 7c93c0ac59

25-04-2013 20:18:08

Wow! Thank you Balázs,


I integrated it in our code base and it is ongoing QA right now. It is looking good.


Thanks for your diligence,


David