Date:  Fri, 09 Jan 2004 14:59:54 -0500
From:  "Mark Dodel" <madodel at ptdprolog.net>
Subject:  [VOICENWS] SW: JAVA USERS/DEVELOPERS:  Important security information.


Forwarded message from Brad BARCLAY on Thu, 8 Jan 2004 21:27:37 UTC
  Posted on: comp.os.os2.apps

Hey Everyone:

	I'm glad I happened upon this today before I pack up the computers
tomorrow morning...

	As you may or may not be aware, Java uses public key cryptography for
some functions, such as for signing JAR files and for SSL connections
(with the right libraries installed).

	Unfortunately, recently the Verisign Root Certificate expired, which can
cause problems with signed Java applications that use Verisign-based
certificates (presumably Mozilla is also affected by this -- I haven't
checked yet, however).

	This _could_ affect you, if you're a developer who wants to sign their
JARs using a Verisign-based certificate, or if you're a user and you try
to run such a Java application.  You might get an error from the Java
Runtime preventing you from running some applications.

	The good news is that this _is_ fixable, for all of IBM Java 1.3.1,
Innotek Java 1.4.2, and GoldenCode Java 1.4.1.  See the following Sun
website for details on how to download the new certificate, and how to
update your Java certificate authority file:

	http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F57436

Brad BARCLAY

-- 
=-=-=-=-=-=-=-=-=
 From the OS/2 WARP v4.5 Desktop of Brad BARCLAY.
The jSyncManager Project:  http://www.jsyncmanager.org

---END FORWARDED MESSAGE---



--
 Warpstock 2003 - San Francisco, California, October 18-19
 See the video and presentations:  http://www.warpstock.org

[Moderator's note:  Because of the incredible increase in SPAM lately I 
 will now endeavor to add DESPAM to email addresses in all posts to 
 the News list. Yes I  know that the ReplyTo and From addresses are 
 not modified.  This action is to  protect email addresses that will 
 appear in HTML pages.  If you wish to send a  response to someone 
 listed in the post be sure to remove the "DESPAM" from  any email 
 address in the body of the post.]


                           

-- 

To unsubscribe yourself from this list, send the following message
to majormajor at os2voice.org

     unsubscribe news
     end

If you have an announcement you would like posted to the VOICE 
News list, please send it to submit at os2voice.org. Please include a 
valid reply address and a real contact name.  If you wish to comment
on this post, please reply to feedback at os2voice.org