Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Unidentified developer for Java Web Start application on OS X

On Mac OS X 10.9 signed Java Web Start applications are blocked by default with the message:

"application.jnlp" can't be opened because it is from an unidentified developer.

I know it's possible to weaken the security checks to allow any application to run, but that requires a manual intervention of the end user.

Is it possible to "sign" a Java Web Start application such that it is recognized as originating from an identified developer?

Thank you

like image 311
Emmanuel Bourg Avatar asked Nov 04 '13 12:11

Emmanuel Bourg


People also ask

How do you fix Cannot be opened because it is from an unidentified developer on Mac?

Open System Preferences. Go to the Security & Privacy tab. Click on the lock and enter your password so you can make changes. Change the setting for 'Allow apps downloaded from' to 'App Store and identified developers' from just App Store.

How do I enable Java Web Start on my Mac?

jnlp file in the Mac OS X Finder, right click on the file and select Open With -> Java Web Start. Use the Security Preference to either allow unsigned applications or open the recently downloaded unsigned application.


1 Answers

In the latest OSX releases, Apple has changed it's security model to only support applications from the Mac App Store and identified developers. In most cases, this prohibits jnlp/java-web-start applications from launching.

If this is a trusted application, you may override these settings by updating your system settings as follows:

System Preferences -> Security & Privacy -> (Unlock Window) -> Allow apps downloaded from: (Select Anywhere)

Settings Screen Shot

In some cases you may need to update your Java Security preferences too

System Preferences -> Java -> Security -> (Select Medium)

Settings Screen Shot

Be careful when adjusting these. These settings will open you up to popular attack vectors where an attacker can exploit vulnerabilities within the java runtime (Java 0 days).

like image 90
Derek Slife Avatar answered Oct 25 '22 23:10

Derek Slife