Oracle made a security update to the Java client that effectively breaks all existing Java web apps. This includes the UAG client applets for non-IE browsers. I have been trying to get UAG working on a MacBook Pro in Safari and getting a Java error.

security: Missing Codebase manifest attribute for: https://example.com/InternalSite/applet/detectJava.jar
security: Missing Application-Library-Allowable-Codebase manifest attribute for: https://example.com/InternalSite/applet/detectJava.jar

Looking into this error I came upon: New security requirements for RIAs in 7u51 (January 2014)

Summary:
You are required to sign all RIAs (Applets and Web Start applications).
You are required to set the "Permissions" attribute within the Manifest.
Your application will be affected if it uses Java started through a web browser. Your application will not be affected if it runs anywhere outside of a web browser.

Is there current a patch or workaround to address this?

We are getting the same error with our Mac clients.

Is there a fix for this?

For some additional information, I've tried using old versions of Java 1.7 and run into additional errors:

7u45 and 7u20 gave:

security: LiveConnect (JavaScript) blocked due to security settings.
security: LiveConnect (JavaScript) blocked due to security settings.
security: LiveConnect (JavaScript) blocked due to security settings.
security: LiveConnect (JavaScript) blocked due to security settings.

This describes the cause of that error

Setting security to Medium in Java, with Safari running in 32-bit, I get the following Java console error:

Verifying agent signature. 
Fatal error: signature does not exist!

This is described, with a proposed solution in one of Ben Ari's blog posts.

The solution doesn't work though, as it appears even 32-bit Safari launches a 64-bit version of the Java applet. It doesn't even appear there is a 32-bit version of Java 7 available for OSX.

Not sure if this will help anyone, but at least you can find some information and what I've tried. Maybe we'll discover a work around. If I could find a 32-bit version of Java for OSX I think I could get it working.

• Edited by AHC Admin 20 hours 40 minutes ago

The only version of Java SE 6 for Mac that appears to exist on the entire Internet is: 32-bit Java SE 6 for OSX

Unfortunately, that explicitly disables the web plugin. I think we're hopeless unless Microsoft updates the applet to adhere to current Java security standards, and releases a 64-bit client while they're at it.

Not sure if MS is even going to continue supporting UAG though.

• Edited by AHC Admin 20 hours 39 minutes ago

I have logged a support call with Microsoft regarding this issue.

They will look into it and get back to me.

Meanwhile, I found this possible workaround on the Oracle website.

http://www.java.com/en/download/help/java_blocked.xml

For some additional information, I've tried using old versions of Java 1.7 and run into additional errors:

7u45 and 7u20 gave:

security: LiveConnect (JavaScript) blocked due to security settings.
security: LiveConnect (JavaScript) blocked due to security settings.
security: LiveConnect (JavaScript) blocked due to security settings.
security: LiveConnect (JavaScript) blocked due to security settings.

This describes the cause of that error

Setting security to Medium in Java, with Safari running in 32-bit, I get the following Java console error:

Verifying agent signature. 
Fatal error: signature does not exist!

This is described, with a proposed solution in one of Ben Ari's blog posts.

The solution doesn't work though, as it appears even 32-bit Safari launches a 64-bit version of the Java applet. It doesn't even appear there is a 32-bit version of Java 7 available for OSX.

Not sure if this will help anyone, but at least you can find some information and what I've tried. Maybe we'll discover a work around. If I could find a 32-bit version of Java for OSX I think I could get it working.

• Edited by AHC Admin Thursday, January 30, 2014 3:08 PM

The only version of Java SE 6 for Mac that appears to exist on the entire Internet is: 32-bit Java SE 6 for OSX

Unfortunately, that explicitly disables the web plugin. I think we're hopeless unless Microsoft updates the applet to adhere to current Java security standards, and releases a 64-bit client while they're at it.

Not sure if MS is even going to continue supporting UAG though.

• Edited by AHC Admin Thursday, January 30, 2014 3:09 PM

The workaround appears to be Windows specific, I don't see any equivalent way to do this on OSX.