Trail: Security Features in Java SE
Lesson: Signing Code and Granting It Permissions
Steps for the Code Receiver
Home Page > Security Features in Java SE > Signing Code and Granting It Permissions
Steps for the Code Receiver

In this lesson, you will act as the receiver of the signed jar file containing the count.class file. It was signed by Susan. It requests access to your system resources on your system that it normally would not have permission to access.

This procedure requires you to perform the following steps listed below. See the figure below for a flowchart.

  1. Observe the Restricted Application. This application will not be able to access your system resources until you import Susan's certificate and create a policy file.

  2. Import Susan's certificate as a trusted certificate using the keytool -import command, and give it the alias susan.

  3. Set up a policy file to grant permission for the count application signed by susan to read the specified file on your system.

  4. Test your reconfigured count application to verify that with a trusted certificate and access to your new policy file that grants it permission to read files on your system, count can now read your data file.

Steps for Receiving Code
This figure has been reduced to fit on the page.
Click the image to view it at its natural size.

Previous page: Export the Public Key Certificate
Next page: Observe the Restricted Application