VncViewer.jar inside Browser

Hello everybody!

Is there a solution for the following problem:

I try to access VncViewer.jar via a browser (in particular IE11) with Java jre1.8.0151 installed.
The applet is blocked due to the security-settings of java (see image below):
[cid:[email protected]]

The security-settings for java are already set to "high" and the site is inside the exception-list...
After pressing "OK" the following popup is shown:

[cid:[email protected]]

Under more details I get the following information:
com.sun.deploy.security.BlockedException: Ihre Sicherheitseinstellungen haben die Ausführung einer nicht vertrauenswürdigen Anwendung blockiert
Die folgende Ressource ist mit einem schwachen Signaturalgorithmus MD5withRSA signiert und wird als unsigniert behandelt: http://id1269-visu:5800/VncViewer.jar
                at com.sun.deploy.security.BlockedDialog.show(Unknown Source)
                at com.sun.deploy.security.SandboxSecurity.checkRunUntrusted(Unknown Source)
                at com.sun.deploy.security.SandboxSecurity.checkUnsignedSandboxSecurity(Unknown Source)
                at com.sun.deploy.security.SandboxSecurity.isPermissionGranted(Unknown Source)
                at com.sun.deploy.security.SandboxSecurity.isPermissionGranted(Unknown Source)
                at sun.plugin2.applet.Plugin2ClassLoader.isTrustedByTrustDecider(Unknown Source)
                at sun.plugin2.applet.Plugin2ClassLoader.getPermissions(Unknown Source)
                at sun.plugin2.applet.Applet2ClassLoader.getPermissions(Unknown Source)
                at java.security.SecureClassLoader.getProtectionDomain(Unknown Source)
                at java.security.SecureClassLoader.defineClass(Unknown Source)
                at java.net.URLClassLoader.defineClass(Unknown Source)
                at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
                at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
                at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
                at java.lang.reflect.Method.invoke(Unknown Source)
                at sun.plugin2.applet.Plugin2ClassLoader.defineClassHelper(Unknown Source)
                at sun.plugin2.applet.Plugin2ClassLoader.access$100(Unknown Source)
                at sun.plugin2.applet.Plugin2ClassLoader$2.run(Unknown Source)
                at sun.plugin2.applet.Plugin2ClassLoader$2.run(Unknown Source)
                at java.security.AccessController.doPrivileged(Native Method)
                at sun.plugin2.applet.Plugin2ClassLoader.findClassHelper(Unknown Source)
                at sun.plugin2.applet.Applet2ClassLoader.findClass(Unknown Source)
                at sun.plugin2.applet.Plugin2ClassLoader.loadClass0(Unknown Source)
                at sun.plugin2.applet.Plugin2ClassLoader.loadClass(Unknown Source)
                at sun.plugin2.applet.Plugin2ClassLoader.loadClass(Unknown Source)
                at java.lang.ClassLoader.loadClass(Unknown Source)
                at sun.plugin2.applet.Plugin2ClassLoader.loadCode(Unknown Source)
                at sun.plugin2.applet.Plugin2Manager.initAppletAdapter(Unknown Source)
                at sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Unknown Source)
                at java.lang.Thread.run(Unknown Source)


I've checked the following link https://wiki.byte-welt.net/wiki/Einbinden_von_Java-Applets_in_HTML-Dateien

There it says it's important to use permission on the applet inside the html-file when using java higher then Java 7 Update 51.
And in the source-code from vncviewer.exe where the html-page is generated there is the applet build without permission:

    <APPLET CODE=VncViewer.class ARCHIVE=VncViewer.jar WIDTH=%d HEIGHT=%d>
      <PARAM NAME=\"PORT\" VALUE=\"%d\">
    </APPLET><BR>

Is there a possibility to sign the jar-file with a stronger signature or a kind of certificate to get around this problem?

Thank you very much for your help!

Hilmar
________________________________

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

___________________________________________________________
TightVNC mailing list, [email protected]
To change your subscription or to UNSUBSCRIBE, please visit
https://lists.sourceforge.net/lists/listinfo/vnc-tight-list