"Do you want to run this application" JNLP dialog - conditions for the dialog to be shown again

Question

A user is running a JNLP app which is launched from the browser. The *.jar file launched by the JNLP is signed by a Certificate issued by a trusted CA.

For the first time the jar file is launched, the user is asked a question whether he trusts the signer (not the CA - the CA is already trusted).

If the user says yes, signer's certificate gets added to the trust store.

Question is: what are the conditions for the same dialog to be shown again?

• Has the *.jar file called by the JNLP changed?
• Has the JNLP itself changed?
• Has the URL of the JNLP changed?

Which of these (or something else?) will trigger the dialog to be shown even after user has checked the "Do not show this again" checkbox initially?

Answer 1

I wasn't able to find a lot of information online about this subject, but I found, from this page of the Java Doc, that once the user accepts the certificate shown in the dialog, the application will be automatically granted permission

until the certificate expires or is removed from the trusted key store.

I couldn't find any more official text from the Java Doc that stated more about conditions that could trigger the same dialog again, but at this site, there was this statement:

... if the JNLP changes, then it's considered another application and therefore you see the Security Warning again.

which could mean that if the JNLP changes, then the dialog would be triggered again.

Also, if you wanted to restore the security prompts that you have allowed to run automatically, you could follow the steps shown here.

Hopefully this can help in some way and is related to what you're asking for.