Java runtime security warning when opening a console

[DavideP]

First of all many thanks to the ProxMox team for this great software!
Now my question, every time i open a VM console i get a security warning from java 7.4 runtime that says that i am about to run an unlimited app from an unknown author.
I can check the "I am aware of the risk, execute it anyway" checkbox and the console starts, but the next time the warning will show up again.
Do you know if there is a way to get rid of it for good?

Many thanks in advance.
Davide.

 

[emanuelebruno]

I have the same problem... any solution?

Emanuele Bruno

 

[mir]

Use OpenJDK7 instead to avoid this warning.

java version "1.7.0_25"
OpenJDK Runtime Environment (IcedTea 2.3.12) (7u25-2.3.12-4)
OpenJDK 64-Bit Server VM (build 23.7-b01, mixed mode)
http://openjdk.java.net/

 

[DavideP]

Use OpenJDK7 instead to avoid this warning.
...
http://openjdk.java.net/

I just tried to install openjdk, but it doesn't seems to work on a windows client.
Both firefox and IE just warn me that they don't have a java plugin available.

 

[tom]

you can lower the security settings to medium (java client settings) or use a trusted certificate.

 

[DavideP]

you can lower the security settings to medium (java client settings) or use a trusted certificate.

Lowered the security to medium and still no joy, the trusted certificate is a bit pricey solution, i guess i will get used to this warning.

 

[snowman66]

I guess you can simply export proxmox certiificate and mark it as trusted: http://www.java.com/en/download/help/jcp_security.xml

 

[DavideP]

Sorry for the silly question, but how can I do this?
I tried to import the certificate pretty much everywhere, also in the "Trusted root CA", but it doesn't work. :-|

 

[spirit]

Hi,

I don't have any security error with sun java 1.7.40

 

[JannisK]

Hi everyone!

Is there a working solution for this? Lowering the java security settings to medium also doesnt solve the problem.
im at sun java 1.7.0_45

 

[lbenaglia]

With java 1.7.0_45-b18 I have the following security warning:



The yellow section reports that the problem is that the manifest does not contain the Permissions attribute. Clicking on More Information, you will be redirect on the following page and here you will find the istructions to modify the manifest.
Does this issue will be fixed with a future update?

Thanks,

--
Lorenzo

 

[dietmar]

I guess nobody really knows what Oracle tries to do. They change the security code with each release, and popup the same dialogs again and again even if the user says he wants to trust.

So we will try to move to spice/remote-viewer in near future.

 

[tin]

I guess nobody really knows what Oracle tries to do.

LOL - sometimes I think they don't even know what they're trying to do.

So we will try to move to spice/remote-viewer in near future.

That would mean a client is required on every system you want to run it on, right? Will you keep the Java as a fallback option for those who can't install a SPICE client (or don't want to)? A lot of the times I need to use the VNC consoles at the moment are to quickly check things (or quickly start an install of a new OS, etc), and a lot of the time it's from whatever random PC is closest.
The Java errors might be annoying, but it's less annoying than having no access at all.

 

[tom]

see also http://forum.proxmox.com/threads/16...E-3-1-including-Comodo-signed-Java-VNC-applet

so far there is no plan to remove the VNC java console. VNC and spice can be used.