Ukrsotsbank网上银行applet错误“应用程序被安全设置阻止”

时间:2014-02-06 13:56:37

标签: java security ubuntu applet

这是与applet page的链接。关于我的环境:

  • 我有Ubuntu 13.10和chrome-browser作为网络浏览器。
  • 我安装了oracle jvm:

    $ java -version
    java version "1.7.0_51"
    Java(TM) SE Runtime Environment (build 1.7.0_51-b13
    Java HotSpot(TM) 64-Bit Server VM (build 24.51-b03, mixed mode)
    
  • 我的ip_local_port_range

    $ cat /proc/sys/net/ipv4/ip_local_port_range 
    32768   61000
    
  • ibank.ukrsotsbank.com已添加到我的jcontrol例外列表中

当运行它的applet落在SecurityException的描述Missing required Permissions manifest attribute in main jar: https://ibank.ukrsotsbank.com/client2019UA.jar

当我尝试启动测试页面时,我遇到Application Blocked错误Your security settings have blocked an untrusted application from running

我的安全设置级别中等。

顺便说一下,当我试图从Windows 8.1打开这个小程序时,一切都还可以,当我要求我的朋友在他的Gentoo中打开它时 - 一切都很好。

如果你看一下clent.xml,你会看到port="433",但是当我使用$ sudo sysctl -w net.ipv4.ip_local_port_range="433 61000"更改它时,没有效果。

有没有人知道如何解决这个问题?

1 个答案:

答案 0 :(得分:1)

Missing required Permissions manifest attribute in main jar: 
   https://ibank.ukrsotsbank.com/client2019UA.jar

好吧,清单的内容是(为了简洁而删除了许多Name:SHA1-Digest个条目。

Manifest-Version: 1.0
Ant-Version: Apache Ant 1.7.0
Created-By: 16.3-b01 (Sun Microsystems Inc.)

Name: com/bifit/security/core/l.class
SHA1-Digest: d2WlbgJlgMWvzj4b5EjxPrd1IlA=

Name: com/bifit/util/VerbalNumber_ua.class
SHA1-Digest: YZt7ca1OqSFbsVlrjH9+4acukFg=

...

Name: com/bifit/security/token/CrystalNativeLoader$F2.class
SHA1-Digest: Fgczu0EVPvoSv5QKOqDSgIawfC0=

所以Permissions属性是a)必需的,b)缺失。它应该是这样的:

Manifest-Version: 1.0
Implementation-Title: MyApplet
Implementation-Version: applet build
Application-Name: Slide Show
Caller-Allowable-Codebase: *
Trusted-Library: true
Application-Library-Allowable-Codebase: *
Trusted-Only: true
Permissions: all-permissions  // <- ensure this bit is in the manifest!

Name: com/bifit/security/core/l.class
SHA1-Digest: d2WlbgJlgMWvzj4b5EjxPrd1IlA=

Name: com/bifit/util/VerbalNumber_ua.class
SHA1-Digest: YZt7ca1OqSFbsVlrjH9+4acukFg=

...

Name: com/bifit/security/token/CrystalNativeLoader$F2.class
SHA1-Digest: Fgczu0EVPvoSv5QKOqDSgIawfC0=

确保标记为// <- ensure this bit is in the manifest的行位于清单中,但注释仅用于显示其显示方式。不要包含评论本身。