[Bug 1895] Icedtea plugin throws up an error screen in Firefox

[bugzilla-daemon at icedtea.classpath.org]

http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=1895

--- Comment #8 from Andrew Azores <aazores at redhat.com> ---
So it's still happening, even with the certificates cleared out, and even on a
fresh state (LiveCD through clean install, so no certificates at all)?
Interesting. Unfortunately, the stack trace you've supplied doesn't help with
determining why this particular applet you have doesn't work correctly with
IcedTea-Web 1.5. I'm really confused as to how this exception is occurring
without a security prompt ever appearing. I don't suppose you can point me to
any public-facing applet that displays this behaviour?

If you're able to, it would be very helpful if you could test this applet with
IcedTea-Web's latest mercurial, rather than using 1.5. I'd spent quite a bit of
time working on a patch that adds support for signed applets with sandbox
permissions in their manifest (ie exactly the thing the exception here reports
is not yet supported), but the fix is too large and behaviour-changing for a
backport to 1.5. Until 1.6 is released, the only way to test if this patch
resolves your issue is to manually build from mercurial.

Instructions on building from mercurial here:
http://icedtea.classpath.org/wiki/IcedTea-Web#Getting_IcedTea-Web

Alternatively, you can try the following workaround. Note that I *do not*
recommend using this workaround permanently, or with any other non-critical
applets you may run, as it circumvents several security features. This should
really only be used as a workaround to get your required, trusted applet
working until 1.6 is released.

Edit the file $HOME/.config/icedtea-web/deployment.properties (this path may be
different if you have defined a differing XDG config home environment variable)
and append the following line:

deployment.manifest.attributes.check=false

Again, please *do not* leave this property in place permanently as it severely
reduces applet security.

You can also try to find an IcedTea-Web 1.4 package from the Mint 16
repositories and try to install that on your Mint 17 machine. I don't know if
that will work correctly as I'm not a Mint user, but it may be another
workaround you can explore in the meantime.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.openjdk.java.net/pipermail/distro-pkg-dev/attachments/20140813/f1bebe6f/attachment.html>