Page 1 of 2

Receive msg “Your security settings have blocked a self-sign

Posted: Thu Mar 20, 2014 2:45 pm
by ko40670
See http://www.java.com/en/download/help/java_blocked.xml" rel="nofollow" rel="nofollow

The application that you are running is blocked because the application does has comply with security guidelines implemented in Java 7 Update 51.

Contact the developer or publisher of this application and let them know about the application being blocked. You can refer them to these links that provide information about implementing secure practices in the code for the application.

•JAR File Manifest Attributes for Security
•Java SE 7 Security Documentation
•Secure Coding Guidelines for the Java Programming Language, Version 4.0

--------------------------------------------------------------------------------

Re: Receive msg “Your security settings have blocked a self-

Posted: Fri Mar 21, 2014 12:45 pm
by ko40670
Receive message “Your security settings have blocked a self-signed application from running” when running batch downloads.

Re: Receive msg “Your security settings have blocked a self-

Posted: Wed Jun 25, 2014 4:26 pm
by ko40670
Is this being addressed? We are not able to use the batch download feature.

Re: Receive msg “Your security settings have blocked a self-

Posted: Thu Jun 26, 2014 9:56 pm
by FTP
You can set the Java security level into "Medium": http://www.java.com/en/download/help/jcp_security.xml" rel="nofollow

Re: Receive msg “Your security settings have blocked a self-

Posted: Mon Sep 15, 2014 8:34 pm
by jsenge
Are there any plans to sign the Java applications contained within the server package?

I understand that we are able to work around this issue by lowering the security settings within Java, but I don't think it's acceptable to ask our clients to lower these settings.

Re: Receive msg “Your security settings have blocked a self-

Posted: Tue Sep 16, 2014 1:57 pm
by jfoley
I agree with jsenge completely. I don't think its right to have to lower my own company's security settings, let alone make other companies lower theirs just to comply with the Wing FTP Software. We need this fixed. There is no other way I know of to upload multiple files to our server at a time (other than using an ftp client, or zipping the file), and this is causing unrest.

I had purchased Wing FTP to get away from using FTP clients, so that remote users didn't have to download or install anything and be able to conduct business. When will this be resolved?

Re: Receive msg “Your security settings have blocked a self-

Posted: Wed Sep 17, 2014 2:47 am
by FTP
Jupload and Jdownload are web client plugins, and they use some open source Java applet, my suggestion is:

1. Set the Java security level into "Medium": http://www.java.com/en/download/help/jcp_security.xml" rel="nofollow

2. You can sign those java applets by yourself.

Re: Receive msg “Your security settings have blocked a self-

Posted: Thu Sep 18, 2014 1:39 pm
by jsenge
Ok, I see where we find the JAR files for Jupload and Jdownload if we want to sign them ourselves, but what are we supposed to do about the 'WingDownloader' application that gets opened when attempting to multiple files by going to Batch Download ( +More Actions -> Batch Download ) from the web interface?

Re: Receive msg “Your security settings have blocked a self-

Posted: Fri Sep 19, 2014 3:22 am
by FTP
You can sign this Java applet file "webclient/downloader.jar".

Re: Receive msg “Your security settings have blocked a self-

Posted: Mon Sep 22, 2014 7:51 pm
by jsenge
With Jupload and Jdownload, I can see if you don't want to sign it if it's completely open source. I'll give you the benefit of the doubt on that one. My only recommendation is that you make those opt-in components of your server software rather than including them with your installation package. That would give you the opportunity to put a disclaimer saying they're self signed.

WingDownloader though, is a Java application that you put your name on. If you're putting your name on it, then I assume that you consider it your own. It isn't available for download like the other Web Client Plugins, which makes it seem like it's more of an integral part of the Web Client, rather than an optional Web Client Plugin.

You advertise that your web client allows you to transfer multiple files at the same time. The only way to do this (that I'm aware of) is with one of these 3 plugins. Yes, you can lower your security to permit running the application, but I wouldn't expect that from software that I have purchased. Soon, we aren't even going to have the option to lower our Java security to medium. With Java 8 update 20, which will soon be the default download on java.com, the medium security option is removed.

With the security adjustments to Java, you are forcing us to not only purchase your software and the subsequent update protection (if we want to keep the software up to date), but to also purchase a Java Code Signing Certificate. I'm sure your customers aren't looking to distribute this software, as you are the ones distributing it, so this just seems like an unnecessary expense to everyone who has purchased your software expecting it to work properly.

Do us all a favor and sign your code.