Monday 21 October 2013

Java 7 update 40 and Signing of Oracle E-Business Suite JARs

Once of our customers upgraded Java 7 with recent release of update 40. Issue started after it is that each time you login to Oracle Applications, Security window is displayed and is being asked to certify publisher before running the application. 

It appears that it's a new security feature on java 7 update 40. This wasn't the case till previous Java 7 updates (up to 25). Starting with Java 7 Update 40, the option for ‘Do not show this again for this app’ is no longer available. Unlike previous versions, the user cannot suppress the security dialog for an unsigned application and will have to select the option; I accept the risk and want to run this app each time to run the unsigned application. 

New Security Warning for Unsigned and Self-signed Applications Message added Running unsigned applications like this will be blocked in a future release because it is potentially unsafe and a security risk.

Oracle Jar files are unsigned, the reason it keeps asking every time when user logs in. Solution is obvious and requires signing of Oracle E-Business Suite JAR Files. Steps are documented in 1591073.1.

I was bit unfortunate here. I initially followed 1207184.1, but it did not work. The support document used for Signing of Oracle E-Business Suite JAR has been updated today by the support that the document 1207184.1 is being decommissioned. Support published a new version of the document 1591073.1: Enhanced Jar Signing for Oracle E-Business Suite.

I am not going to rewrite all the steps, please refer to the document for detailed steps, but just thought ot sharing if anybody is planning to upgrade to u40, must consider signing of EBS JARs. 


No comments:

Post a Comment