Posts

Showing posts from January, 2015

Working with Java Deployment Rulesets (Part 1)

Image
From Java 1.7.0_40, Oracle have introduced a new feature called Java Deployment Rulesets.  These rulesets allow you to define security and compatibility settings at the client level for a given URL.  You can also optionally specify which version of the Java Runtime should be used on a per-URL basis. To allow unsigned Java applets to run, you must change the Java security level to "Medium".  The default is set to High.  Note that, as of Java 8, the "Medium" security level is no longer available.  With Java 8, the only two options you have available (regarding unsigned applets) is to either add the URL to the "Exception Site List" (http://docs.oracle.com/javase/7/docs/technotes/guides/jweb/security/deployment_rules.html ), or to add the URL to our ruleset which I will cover in this post. In 1.7.x, once the security level is set to medium and you try to run an unsigned Java applet, you'll receive a warning like this: To suppress this warning