title: signed applet blocked on webbrowser with reverse Proxy ('Unknown Source')
body: <p>I'm having problems to deploy a signed applet (certificate from a trusted CA) on a new webserver. It is running fine on my old webserver, but when I transfer it to the new host, it is blocked by Java security settings. </p>
  
  <p>I deploy it like this in my html file:</p>
  
  <pre><code>&lt;div id="applet"&gt;
  &lt;script&gt;
      var attributes = {codebase:'http://ab123.wwwdns.example.com/Applet/',
                        code: 'db.main.ExApplet',
                        archive: 'ExampleApplet.jar',
                        width: '1150', 
                        height: '700',
                        permissions: 'sandbox'};
      var parameters = {}; 
      var version = '1.6';
      deployJava.runApplet(attributes, parameters, version);
  &lt;/script&gt;
  &lt;/div&gt;
  </code></pre>
  
  <p>my MANIFEST file contains the following lines:</p>
  
  <pre><code>Manifest-Version: 1.0
  Application-Name: Example Name
  Permissions: sandbox
  Caller-Allowable-Codebase: *.example.com http://ab123.wwwdns.example.com http://other.example.com
  Codebase: *.example.com http://ab123.wwwdns.example.com http://other.example.com
  Application-Library-Allowable-Codebase: *.example.com http://ab123.wwwdns.example.com http://other.example.com
  Entry-Point: db.main.ExApplet
  </code></pre>
  
  <p>(previously I tried it with only specifying *.example.com but this did not work either)</p>
  
  <p>I guess the problem is related to the fact that the applet can now be accessed by two different URLs (ab123.wwwdns.example.com and other.example.com)? </p>
  
  <p>Here is an excerpt from the Java Console (Java 8 Update 71 build 15 Plugin on Firefox):</p>
  
  <pre><code>java.lang.reflect.InvocationTargetException
  ...
  Caused by: com.sun.deploy.security.BlockedException: Your security settings have blocked an untrusted application from running
      at com.sun.deploy.security.BlockedDialog.show(Unknown Source)
      at com.sun.deploy.security.SandboxSecurity.checkRunUntrusted(Unknown Source)
      at 
  com.sun.deploy.security.SandboxSecurity.checkUnsignedSandboxSecurity(Unknown Source)
  ...
  </code></pre>
  
  <p>Any hints are welcome!</p>