Technical Support Forum Index
Technical Support Forum
Access ChemAxon scientists and developers here. For registration and login issues contact website support.
Browser drops security warning by loading Marvin applets.
To watch this topic for replies  Register (enables digests) or give email address:
Reply to topic
Display posts from previous:   
    View previous topic :: View next topic    
Author Message
Tamas
ChemAxon personnel
Joined: 21 May 2004
Posts: 2116

View user's profile

Back to top
Link to postPosted: Fri Apr 09, 2010 5:29 pmPost subject: Browser drops security warning by loading Marvin applets. Reply with quote

Several users have reported this issue:

By loading Marvin applets, Java plugin throws the following warning:

 

Java has discovered application components that could indicate a security concern.

Name: JMSketchLaunch

Block potentially unsafe components from being run? (recomment)

This problem occurs only with Java Plugin 1.6.0_19.




 Filename: javasecuritywarning.png    Filesize: 11.71 KB    Viewed: 15206 Time(s)
 Description:  warning
javasecuritywarning.png


Last edited by Tamas on Mon Jun 07, 2010 2:47 pm; edited 1 time in total
Tamas
ChemAxon personnel
Joined: 21 May 2004
Posts: 2116

View user's profile

Back to top
Link to postPosted: Fri Apr 09, 2010 5:43 pmPost subject: Reply with quote

It is a default behaviour of Java Plugin 1.6.0_19. It does not let to download unsecury content. See Java documentation about it:

Error : Java has discovered application components that could indicate a security concern.

This problem occurs if a resource file out of the jar is loaded by classloader: Class.getResourseAsStream(String).

Java blocks loading of the file until you submit the popup warning dialog. If you say "Yes", Java rejectst downloading of the file. If you say "No", Java accepts and download the file.

So when this warning dialog appears in Marvin applets, always choose No.

In Java Control Panel, you can modify the default setting of this verification.

Java Control Panel / Security / Mixed code (sandbox vs. trusted) security verification. Choose the

Enable - hide warning and run with protection

to accept these kind of files in all cases without displaying warning dialog.

We are working on to eliminate Class.getResourceAsStream in Marvin code to solve this problem.

Tamas
ChemAxon personnel
Joined: 21 May 2004
Posts: 2116

View user's profile

Back to top
Link to postPosted: Wed Jun 02, 2010 11:06 pmPost subject: Reply with quote

We have already solved this issue in the latest release (5.3.3). Warning are eliminated.

dholyfield

Joined: 14 Jan 2009
Posts: 44

View user's profile

Back to top
Link to postPosted: Wed Jan 26, 2011 5:59 pmPost subject: Reply with quote

We are suddenly having thus problem in Win XP/7 after upgrading to MarvinSketch 5.4.0. I do not get the warning when viewing the demo here on the ChemAxon site. Any hints on what files need to be moved/changed to eliminate this popup? We're getting a lot of complaints from students/instructors about it ...

Tamas
ChemAxon personnel
Joined: 21 May 2004
Posts: 2116

View user's profile

Back to top
Link to postPosted: Thu Jan 27, 2011 12:54 pmPost subject: Reply with quote

Are you sure that you use 5.4.0? Probably an old version of Marvin has stuck in the Java cache and Java loads this old version instead of the new one.

Please clear Java cache, restart browser and try loading applet again. See linking forum topic: How I can clear JRE cache

If the applet appears, you can check the version number of the running instance by opening the About MarvinSketch dialog from the Help menu.

dholyfield

Joined: 14 Jan 2009
Posts: 44

View user's profile

Back to top
Link to postPosted: Thu Jan 27, 2011 7:32 pmPost subject: Reply with quote

Tamas,

thanks for the reply. Yes, we are sure we are on 5.4.0. Clearing the Java and browser caches does not fix the problem. We're having other problems as well and wondering if they're not all inter-related.

Do you remember a little while back when we upgraded to 5.4 and had a problem with isotopes.data? Our temporary workaround was to hack Apache to serve up isotopes.data as an octet-stream. I think we're seeing the ramifications of that now - with some of the other problems, the Java console indicates an error - isotopes was not in an expected gzipped format. I'm wondering if isotopes.data is also the 'unsigned component' Java is yelling about.

Do you have any idea when a proper fix for that issue will be released? Last we had heard, you guys were looking into it.

 

thanks

Danny Holyfield

Tamas
ChemAxon personnel
Joined: 21 May 2004
Posts: 2116

View user's profile

Back to top
Link to postPosted: Fri Jan 28, 2011 5:08 pmPost subject: Reply with quote

The isotopes.data issue has been discussed in this topic:

applet.getMol in MarvinSketch 5.4

We have already registered this issue in our bug tracking system. This task has been scheduled after next major release.

dholyfield

Joined: 14 Jan 2009
Posts: 44

View user's profile

Back to top
Link to postPosted: Fri Jan 28, 2011 5:16 pmPost subject: Reply with quote

Thanks for the update. We are in the process today of reverting to Marvin 5.3.8 on our production servers, please let us know when a version that is stable on Apache (with respect to isotopes.data) is released. I know you won't have an exact ETA, but can you give us a window in which that will probably be released?

Tamas
ChemAxon personnel
Joined: 21 May 2004
Posts: 2116

View user's profile

Back to top
Link to postPosted: Mon Jan 31, 2011 4:37 pmPost subject: Reply with quote

Of course, we are going to notify you when this issue has been solved.

We can also provide a pre-release in test phase if you require it.

Tamas
ChemAxon personnel
Joined: 21 May 2004
Posts: 2116

View user's profile

Back to top
Link to postPosted: Thu Aug 04, 2011 9:25 amPost subject: Reply with quote

As I see, the problem has already been solved: applet.getMol in MarvinSketch



Last edited by Tamas on Mon Aug 13, 2012 9:55 am; edited 1 time in total
Richard12

Joined: 13 Sep 2011
Posts: 1

View user's profile

Back to top
Link to postPosted: Tue Sep 13, 2011 12:49 pmPost subject: Hi Reply with quote

Thanks

chess

Joined: 10 Apr 2013
Posts: 10

View user's profile

Back to top
Link to postPosted: Tue May 14, 2013 3:50 pmPost subject: Reply with quote

So I'm getting this warning again as of 5.12.1 (see the screenshot (the application is listed as 'medit' as thats the id of the applet element).

Looking at previous threads it seems like this was solved via the codebase_lookup param.  However, even with this param present the warning still occurs.  I'm not seeing any difference in the content that is loaded based on the java logs - What information do I need to provide so you guys can attempt to diagnose this problem, or is this something that is known alreadY?




 Filename: Screen Shot 2013-05-14 at 10.45.43 AM.png    Filesize: 32.95 KB    Viewed: 6906 Time(s)
 Description:  
Screen Shot 2013-05-14 at 10.45.43 AM.png
bzaicsek
ChemAxon personnel
Joined: 10 Oct 2012
Posts: 194

View user's profile

Back to top
Link to postPosted: Tue May 14, 2013 4:35 pmPost subject: Reply with quote

Dear Chess!

   Haven't you updadet to Java 1.7.0_u21 recently? Did the warning appear after the update?

Regards:
Balázs

chess

Joined: 10 Apr 2013
Posts: 10

View user's profile

Back to top
Link to postPosted: Tue May 14, 2013 6:20 pmPost subject: Reply with quote

I'm running the latest java, which if I'm not mistaken is 1.7r21. The warning has always been present with 5.12.1 for me - granted I've only been working with it for the past ~4 weeks so I have no idea if a new java update is responsible or not.

I know that the end user can tweak their browser settings to avoid this warning, but I'd like to avoid that scenario if at all possible, as there shouldn't be a securty warning coming from any of this content.

bzaicsek
ChemAxon personnel
Joined: 10 Oct 2012
Posts: 194

View user's profile

Back to top
Link to postPosted: Wed May 15, 2013 8:39 amPost subject: Reply with quote

Dear Chess!

   The 21th update of Java 1.7 requires one more security flag to be set in your applet. We can do this by rebuilding the applet, and send the patched jars to you. I am going to contact the build team about this issue, and will send you the correct jars soon.

Regards:
Balázs 

bzaicsek
ChemAxon personnel
Joined: 10 Oct 2012
Posts: 194

View user's profile

Back to top
Link to postPosted: Wed May 15, 2013 8:50 amPost subject: Reply with quote

Our latest build (which is currently Marvin 5.12.4) contains this patch. Is it acceptable for you or do you need us to resign 5.12.1. It is possible to do, but 5.12.1 and 5.12.4 only different in bugfixes, it might be a better chosie to use.

chess

Joined: 10 Apr 2013
Posts: 10

View user's profile

Back to top
Link to postPosted: Wed May 15, 2013 3:12 pmPost subject: Reply with quote

It'd be much easier for us to stick with 5.12.1 as we're already relatively far along into verification/testing.  If we could get the 5.12.1 jars re-signed that would be fantastic.  

If you're looking to just email me the jars once they're resigned you can reach me at chess _at_ webassign.net

bzaicsek
ChemAxon personnel
Joined: 10 Oct 2012
Posts: 194

View user's profile

Back to top
Link to postPosted: Wed May 15, 2013 9:28 pmPost subject: Reply with quote

Of courese we will resign them. I contact you as soon as the job is done.

chess

Joined: 10 Apr 2013
Posts: 10

View user's profile

Back to top
Link to postPosted: Thu May 16, 2013 2:29 pmPost subject: Reply with quote

Awesome, thanks so much!

aidendaniel

Joined: 02 Oct 2013
Posts: 1

View user's profile
Visit poster's website

Back to top
Link to postPosted: Wed Oct 02, 2013 1:29 pmPost subject: Reply with quote

Hey Tamas, Thanks for the isotopes.data issue tip ;)

Reply to topic
Page 1 of 1


To watch this topic for replies   Register (enables digests) or give email address  
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum