Java security warning - Block Editor

GoogleCodeExporter commented 9 years ago

When I open the Block Editor application (Java Web Start Application - jnlp 
file) I get the following Java security warning:
"The digital signature cannot be verified by a trusted source."

Yes, I know that I can select:
"Always trust content from this publisher"
but it would be safe (and nice) if you signed this application a trusted 
certificate.

(JRE version: 1.6.0 update 21)

Original issue reported on code.google.com by zaj...@gmail.com on 22 Sep 2010 at 6:55

GoogleCodeExporter commented 9 years ago

Original comment by ma...@google.com on 28 Oct 2010 at 7:49

Changed state: Noted

GoogleCodeExporter commented 9 years ago

I get a "Warning - Security" message that sits there forever, so the Blocks 
Editor never opens. 
Any help?

Original comment by pencey.p...@gmail.com on 12 May 2011 at 3:57

GoogleCodeExporter commented 9 years ago

plus, you have do download the software EVERY SINGLE TIME you want to run the 
blocks editor.

Original comment by kd0...@gmail.com on 21 May 2011 at 4:46

GoogleCodeExporter commented 9 years ago

Yes, please do this. I've done it for many software companies and it is just a 
paper-pushing exercise to get the certificate. Not fun, but necessary. 
Especially for a company as big as Google.

Original comment by dcrossm...@gmail.com on 8 Jun 2011 at 2:34

GoogleCodeExporter commented 9 years ago

Is there a work around with the java security settings to allow this to be 
installed.

Original comment by ngcarls...@gmail.com on 16 Aug 2011 at 3:30

GoogleCodeExporter commented 9 years ago

I do not et the security issue, but I get an error:
An error occurred while launching/running the application.

Title: App Inventor for Android Blocks Editor
Vendor: Google
Category: Download Error

Corrupted JAR file at 
http://www.appinventorbeta.com:80/ode/webstartfile/-8ntepffpjok21k359yxkw2z9fvn2
jr0phfty3tif6hecb3l97fy919ng8skd704hw6gozahon8kutv42sqj19ovo4e1qgrvhyiv32a5z62ib
qy2yrvte7gpj6evf82x27cwpfxpb9zjstw81/BlocksEditor.jar

Original comment by aprilh1...@gmail.com on 9 Sep 2011 at 3:14

GoogleCodeExporter commented 9 years ago

I have the exact same issue as comment 6.

Original comment by fuzzy...@gmail.com on 29 Mar 2012 at 3:23

GoogleCodeExporter commented 9 years ago

I just installed App Inventor today, Dec. 3, 2012 on Windows XP SP3 with a new 
Java 7 installation that passes the "Notepad" test.  

Trying to open the Blocks Editor consistently gets me "Failed to validate 
certificate" and "Application will not be executed" from Java.  Under "Details" 
it starts with:

"sun.security.validator.ValidatorException: PKIX path validation failed: 
java.security.cert.CertPathValidatorException: 
java.security.InvalidKeyException: Wrong key usage"

I cannot use App Inventor until this is resolved.  How can I fix this, please?

Original comment by digi.furry9@yahoo.com on 4 Dec 2012 at 12:00

GoogleCodeExporter commented 9 years ago

Update: Success!

Based on other info, I removed Java 7 and replaced it with the older Java 6 
(currently still available) from the same website.  It works fine; successfully 
validates the certificate and runs the Blocks Editor.

Original comment by digi.furry9@yahoo.com on 4 Dec 2012 at 1:34

GoogleCodeExporter commented 9 years ago

Please, update certificate to work with Java 7
Downgrading java is not a reasonable solution.

sun.security.validator.ValidatorException: PKIX path validation failed: 
java.security.cert.CertPathValidatorException: 
java.security.InvalidKeyException: Wrong key usage
    at sun.security.validator.PKIXValidator.doValidate(Unknown Source)
    at sun.security.validator.PKIXValidator.engineValidate(Unknown Source)
    at sun.security.validator.Validator.validate(Unknown Source)
    at sun.security.validator.Validator.validate(Unknown Source)
    at sun.security.validator.Validator.validate(Unknown Source)
    at com.sun.deploy.security.TrustDecider.validateChain(Unknown Source)
    at com.sun.deploy.security.TrustDecider.isAllPermissionGranted(Unknown Source)
    at com.sun.javaws.security.AppPolicy.grantUnrestrictedAccess(Unknown Source)
    at com.sun.javaws.security.JNLPSignedResourcesHelper.checkSignedResourcesHelper(Unknown Source)
    at com.sun.javaws.security.JNLPSignedResourcesHelper.checkSignedResources(Unknown Source)
    at com.sun.javaws.Launcher.prepareResources(Unknown Source)
    at com.sun.javaws.Launcher.prepareAllResources(Unknown Source)
    at com.sun.javaws.Launcher.prepareToLaunch(Unknown Source)
    at com.sun.javaws.Launcher.prepareToLaunch(Unknown Source)
    at com.sun.javaws.Launcher.launch(Unknown Source)
    at com.sun.javaws.Main.launchApp(Unknown Source)
    at com.sun.javaws.Main.continueInSecureThread(Unknown Source)
    at com.sun.javaws.Main.access$000(Unknown Source)
    at com.sun.javaws.Main$1.run(Unknown Source)
    at java.lang.Thread.run(Unknown Source)
Caused by: java.security.cert.CertPathValidatorException: 
java.security.InvalidKeyException: Wrong key usage
    at sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(Unknown Source)
    at sun.security.provider.certpath.PKIXCertPathValidator.doValidate(Unknown Source)
    at sun.security.provider.certpath.PKIXCertPathValidator.engineValidate(Unknown Source)
    at java.security.cert.CertPathValidator.validate(Unknown Source)
    ... 20 more
Caused by: java.security.InvalidKeyException: Wrong key usage
    at java.security.Signature.initVerify(Unknown Source)
    at sun.security.provider.certpath.OCSPResponse.verifyResponse(Unknown Source)
    at sun.security.provider.certpath.OCSPResponse.<init>(Unknown Source)
    at sun.security.provider.certpath.OCSP.check(Unknown Source)
    at sun.security.provider.certpath.OCSPChecker.check(Unknown Source)
    ... 24 more

Original comment by airx...@gmail.com on 16 Feb 2013 at 11:56

Attachments:

[Block Editor cert error load.jpg](https://storage.googleapis.com/google-code-attachments/app-inventor-for-android/issue-161/comment-10/Block Editor cert error load.jpg)

GoogleCodeExporter commented 9 years ago

Please fix the Expired Digital Certificate issue. I'd really like to learn from 
the App Inventor but I'm not prepared to pull down my pants and bend over.

Original comment by muz...@gmail.com on 21 Feb 2013 at 11:38

GoogleCodeExporter commented 9 years ago

Same here, and i don't want to downgrade java ...

Original comment by stmk8...@googlemail.com on 2 Mar 2013 at 10:25

GoogleCodeExporter commented 9 years ago

how i can solve this ?

I am using java 6

Original comment by test.mit...@gmail.com on 12 Mar 2013 at 4:00

GoogleCodeExporter commented 9 years ago

USE FIX AT YOUR OWN RISK.

If you want the AppInventorForAndroidCodeblocks.jnlp
to run without the block screen popping up.
Go to the Java control panel.
Select the Advanced tab.
Scroll down to the Advanced Security Settings.
Uncheck - Enable online certificate validation
Click Apply
    Close Java control panel.
Start - AppInventorForAndroidCodeblocks.jnlp

Original comment by airx...@gmail.com on 13 Mar 2013 at 1:31

GoogleCodeExporter commented 9 years ago

I am also having this issue. My system has already thrown a fit about upgrading 
Java... I'm not about to downgrade it because the certificate might work on 6.

Please update this soon. I really would like to learn how to use the App 
Inventor.

Original comment by wildfi...@gmail.com on 16 Apr 2013 at 7:00

GoogleCodeExporter commented 9 years ago

TY to #14 airx...@gmail.com - comment from Mar 12/13 

Fixed this issue for me - opening up now

Original comment by tulu...@gmail.com on 29 Apr 2013 at 7:09

niteshmourya / app-inventor-for-android

Java security warning - Block Editor #161