Re: Accessing Microsoft Outlook from a Java applet

From: Silvio Bierman (sbierman_at_idfix.nl)
Date: 02/23/04


Date: Mon, 23 Feb 2004 10:23:01 +0100


"Daniel Pope" <daniel-po@shaw.ca> wrote in message
news:Kic_b.596468$ts4.236102@pd7tw3no...
> Thanks for your hints Silvio. So, I have to write a dll (C++) to access
> Outlook or windows registry using COM calls.
> For what I need (getting and setting only Outlook accounts) seems that
> dealing with windows registry is enough.
> What do you mean by "applet must to be signed"? Does it mean a kind of
> certification that the user can see and after approve to allow the applets
> perform enhanced security tasks?
>
> Kind regards,
> Daniel
>

Daniel,

I hint at first : it is usually preferred by newsgroupreaders that you not
toppost, meaning that you put your response at the bottom of the message.

Signing an applet depends on which environment you want it to run in. Look
at http://mindprod.com/jgloss/signedapplets.html for info on this (got this
link from Google just now, there are many more references).
It basically links a certificate to your applets that tells users who wrote
the thing (and could be sued if it shows malicious conduct). If the
certificate is backed up by Verisign and the like (think $$) then it will
run without confirmation from users by default. If not (you can cook your
own certificate) users will by default be prompted whether they want the
applet to run. Either way the applet gets extended permissions to do things
"normal" applets can not do like accessing the local file system, running
native code, doing unrestricted network-IO, accessing ports etc.

Hope this helps,

Regards,

Silvio Bierman



Relevant Pages

  • Re: Not seeing signed applets on first run
    ... I used to accept certificates each run for applets using our own certificate, but I stopped since we just have two signed applets and I didin't seem to surface any problems. ... In this case I deleted our certificate to test, and did see the security dialog coming up. ... But if a true "virgin computer" is one that never accepted any certificate we will not do well finding such computers on this list unless people check on new computers or computers with a clean install of the OS. ...
    (comp.lang.java.programmer)
  • Re: Defending yourself against Nazi IT departments
    ... But well, if the IT department cares, he won't be able to run those in first place. ... Even fully untrusted Java Applets have permission to preselect a user-chosen certificate on a SSLSocketConnection object. ... They also didn't implement appropriate configuration of the Java VM to disallow all but whitelisted applets, but they may have limited it to never trust any applet. ... but it's still allowed to first select its own certificate loaded from its resource and then create a SSLSocketConnection with this certificate. ...
    (comp.security.firewalls)
  • Re: applet signing
    ... > I'm attempting to sign some applets that will step outside the sandbox by ... If you have apache & OpenSSL you can create your own certificates. ... After the certificate is created you can use microsoft's signcode ...
    (comp.lang.java.programmer)
  • Re: cannot connect to mySQL database using an applet
    ... you can buy a certificate to sign applets. ... Matt Parker wrote: ... You can generate your own signing certificate (if you don't mind ...
    (comp.lang.java.help)