Geek Answers Handbook

Completely disable Java security engine?

I have a special question that may not apply to many users - sorry!

We are launching some climate control devices that offer a web-based administration interface using java. These devices are a couple of years old, and support for them has expired. The system that launches the browser (firefox 31.3.0) is CentOS 6.5 Kernel 2.6.32 x86_64 The entire network is closed . The browser is used exclusively to control climate controllers. Some time ago we had to update this version of the OS, and it appeared with Java 1.7.0_71. (Java 1.6 was previously installed)

Now, every time you open the administration page of one of the devices, a security warning appears, asking if the application should run. Ist also says that unsafe applets will be completely blocked in the future.

I managed to get rid of some other really annoying dialogs by setting the security levels as low as possible in the Java ControlPanel, but I did not find a way to completely disable Java protection.

The only way left for now seems to be downgrading to Java 1.6

Is there a way to disable java security features completely ? I know that it is unsafe, unprofessional and very bad. But, as I said: the completely closed network and climate controller administration page is the only page that Firefox will ever see.

Even a very dirty hack is welcome!

Thank!

+4
source share
1 answer

Just install the old version of Java.

You can use the Java Rule Set to control which hosts run V 1.6, etc. This will allow you to have 1.7 while keeping it safe, and 1.6 in whatever state you need.

This will actually give you some decent assurance that only some sites can run older versions. However, you will have to sign this jar. However, you can create and install a certificate in java without any problems.

You will get a few rules:

<rule>
    <id location="https://java.com/" />
    <action permission="run" version="SECURE" />
</rule>
<rule>
    <id location="http://climate.example.com/" />
    <action permission="run" version="1.6.0_31" />
</rule>

See the above example here.

, . - - , , Java, . , Java, .

+2

More articles:


All Articles