Receive msg “Your security settings have blocked a self-sign

Please post here if you have problems in using Wing FTP Server.

Receive msg “Your security settings have blocked a self-sign

Postby ko40670 » Thu Mar 20, 2014 2:45 pm

See http://www.java.com/en/download/help/java_blocked.xml" rel="nofollow

The application that you are running is blocked because the application does has comply with security guidelines implemented in Java 7 Update 51.

Contact the developer or publisher of this application and let them know about the application being blocked. You can refer them to these links that provide information about implementing secure practices in the code for the application.

•JAR File Manifest Attributes for Security
•Java SE 7 Security Documentation
•Secure Coding Guidelines for the Java Programming Language, Version 4.0

--------------------------------------------------------------------------------
ko40670
 
posts 12
 
joined Fri May 06, 2011 7:10 pm

Re: Receive msg “Your security settings have blocked a self-

Postby ko40670 » Fri Mar 21, 2014 12:45 pm

Receive message “Your security settings have blocked a self-signed application from running” when running batch downloads.
ko40670
 
posts 12
 
joined Fri May 06, 2011 7:10 pm

Re: Receive msg “Your security settings have blocked a self-

Postby ko40670 » Wed Jun 25, 2014 4:26 pm

Is this being addressed? We are not able to use the batch download feature.
ko40670
 
posts 12
 
joined Fri May 06, 2011 7:10 pm

Re: Receive msg “Your security settings have blocked a self-

Postby FTP » Thu Jun 26, 2014 9:56 pm

You can set the Java security level into "Medium": http://www.java.com/en/download/help/jcp_security.xml
FTP
Site Admin
 
posts 1232
 
joined Tue Sep 29, 2009 6:09 am

Re: Receive msg “Your security settings have blocked a self-

Postby jsenge » Mon Sep 15, 2014 8:34 pm

Are there any plans to sign the Java applications contained within the server package?

I understand that we are able to work around this issue by lowering the security settings within Java, but I don't think it's acceptable to ask our clients to lower these settings.
jsenge
 
posts 3
 
joined Mon Sep 15, 2014 8:17 pm

Re: Receive msg “Your security settings have blocked a self-

Postby jfoley » Tue Sep 16, 2014 1:57 pm

I agree with jsenge completely. I don't think its right to have to lower my own company's security settings, let alone make other companies lower theirs just to comply with the Wing FTP Software. We need this fixed. There is no other way I know of to upload multiple files to our server at a time (other than using an ftp client, or zipping the file), and this is causing unrest.

I had purchased Wing FTP to get away from using FTP clients, so that remote users didn't have to download or install anything and be able to conduct business. When will this be resolved?
jfoley
 
posts 1
 
joined Tue Sep 16, 2014 1:53 pm

Re: Receive msg “Your security settings have blocked a self-

Postby FTP » Wed Sep 17, 2014 2:47 am

Jupload and Jdownload are web client plugins, and they use some open source Java applet, my suggestion is:

1. Set the Java security level into "Medium": http://www.java.com/en/download/help/jcp_security.xml

2. You can sign those java applets by yourself.
FTP
Site Admin
 
posts 1232
 
joined Tue Sep 29, 2009 6:09 am

Re: Receive msg “Your security settings have blocked a self-

Postby jsenge » Thu Sep 18, 2014 1:39 pm

Ok, I see where we find the JAR files for Jupload and Jdownload if we want to sign them ourselves, but what are we supposed to do about the 'WingDownloader' application that gets opened when attempting to multiple files by going to Batch Download ( +More Actions -> Batch Download ) from the web interface?
jsenge
 
posts 3
 
joined Mon Sep 15, 2014 8:17 pm

Re: Receive msg “Your security settings have blocked a self-

Postby FTP » Fri Sep 19, 2014 3:22 am

You can sign this Java applet file "webclient/downloader.jar".
FTP
Site Admin
 
posts 1232
 
joined Tue Sep 29, 2009 6:09 am

Re: Receive msg “Your security settings have blocked a self-

Postby jsenge » Mon Sep 22, 2014 7:51 pm

With Jupload and Jdownload, I can see if you don't want to sign it if it's completely open source. I'll give you the benefit of the doubt on that one. My only recommendation is that you make those opt-in components of your server software rather than including them with your installation package. That would give you the opportunity to put a disclaimer saying they're self signed.

WingDownloader though, is a Java application that you put your name on. If you're putting your name on it, then I assume that you consider it your own. It isn't available for download like the other Web Client Plugins, which makes it seem like it's more of an integral part of the Web Client, rather than an optional Web Client Plugin.

You advertise that your web client allows you to transfer multiple files at the same time. The only way to do this (that I'm aware of) is with one of these 3 plugins. Yes, you can lower your security to permit running the application, but I wouldn't expect that from software that I have purchased. Soon, we aren't even going to have the option to lower our Java security to medium. With Java 8 update 20, which will soon be the default download on java.com, the medium security option is removed.

With the security adjustments to Java, you are forcing us to not only purchase your software and the subsequent update protection (if we want to keep the software up to date), but to also purchase a Java Code Signing Certificate. I'm sure your customers aren't looking to distribute this software, as you are the ones distributing it, so this just seems like an unnecessary expense to everyone who has purchased your software expecting it to work properly.

Do us all a favor and sign your code.
jsenge
 
posts 3
 
joined Mon Sep 15, 2014 8:17 pm


Return to Support

Who is online

Users browsing this forum: No registered users and 4 guests

cron