tracker issue : CF-4199594

Problem Description:


Steps to Reproduce:
When using cfgrid format=applet with clients having Java 1.8 newer versions shows Java error as "Your security setting have blocked an application signed with an expired or not-yet-valid certificate from running". Attached java block error. On further analysis, it seems like cfapplets.jar files certificate was expired in 2016. Attached is the output of command "jarsigner -verify -verbose -certs cfapplets.jar", which shows [certificate is valid from 1/13/14 7:00 PM to 1/7/16 6:59 PM].

      [entry was signed on 3/18/14 10:00 AM]
      X.509, CN=Adobe Systems Incorporated, OU=Cold Fusion, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US, SERIALNUMBER=2748129, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=Delaware, OID.1.3.6.1.4.1.311.60.2.1.3=US
      [certificate is valid from 1/13/14 7:00 PM to 1/7/16 6:59 PM]
      X.509, CN=Symantec 



This could be because Starting with Java 8 Update 20, the Medium security level has been removed from the Java Control Panel. Only High and Very High levels are available. And, Java security is no longer allowing to run applet with expired certificate. 

Ref link: https://www.java.com/en/download/help/jcp_security.xml

Actual Result:
When using cfgrid format=applet with clients having Java 1.8 newer versions shows Java error as "Your security setting have blocked an application signed with an expired or not-yet-valid certificate from running". Attached java block error.

Expected Result:
It is understood that cfgrid format=applet is listed as deprecated feature in ColdFusion 11, but it is not yet unsupported. So, it is expected that this should work until it is removed in ColdFusion 16.

Any Workarounds:
Avoid using cfapplets.jar based tags/functions/features

Attachments:

1. August 30, 2017 00:00:00: JavaBlockError.GIF

Comments: