Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.java.gui > #2683 > unrolled thread

java webstart problem

Back to article view | Back to comp.lang.java.gui

Contents

  java webstart problem "Bruintje Beer" <bruintje.beer@THRWHITE.remove-dii-this> - 2011-04-27 15:40 +0000
    Re: java webstart problem "Roedy Green" <roedy.green@THRWHITE.remove-dii-this> - 2011-04-27 15:40 +0000
      Re: java webstart problem "Roedy Green" <roedy.green@THRWHITE.remove-dii-this> - 2011-04-27 15:40 +0000
        Re: java webstart problem "tar" <tar@THRWHITE.remove-dii-this> - 2011-04-27 15:40 +0000
          Re: java webstart problem "Andrew Thompson" <andrew.thompson@THRWHITE.remove-dii-this> - 2011-04-27 15:40 +0000
          Re: java webstart problem "Roedy Green" <roedy.green@THRWHITE.remove-dii-this> - 2011-04-27 15:40 +0000
      Re: java webstart problem "Gunter Herrmann" <gunter.herrmann@THRWHITE.remove-dii-this> - 2011-04-27 15:40 +0000
        Re: java webstart problem "Roedy Green" <roedy.green@THRWHITE.remove-dii-this> - 2011-04-27 15:40 +0000
          Re: java webstart problem "Rogan Dawes" <rogan.dawes@THRWHITE.remove-dii-this> - 2011-04-27 15:40 +0000
            Re: java webstart problem "Mark Thornton" <mark.thornton@THRWHITE.remove-dii-this> - 2011-04-27 15:40 +0000
              Re: java webstart problem "Rogan Dawes" <rogan.dawes@THRWHITE.remove-dii-this> - 2011-04-27 15:40 +0000
                Re: java webstart problem "Mark Thornton" <mark.thornton@THRWHITE.remove-dii-this> - 2011-04-27 15:40 +0000
                  Re: java webstart problem "Rogan Dawes" <rogan.dawes@THRWHITE.remove-dii-this> - 2011-04-27 15:41 +0000
                    Re: java webstart problem "Mark Thornton" <mark.thornton@THRWHITE.remove-dii-this> - 2011-04-27 15:41 +0000
                Re: java webstart problem "Mark Thornton" <mark.thornton@THRWHITE.remove-dii-this> - 2011-04-27 15:40 +0000
            Re: java webstart problem "Roedy Green" <roedy.green@THRWHITE.remove-dii-this> - 2011-04-27 15:40 +0000

#2683 — java webstart problem

  To: comp.lang.java.gui
Hi,

I am trying to start a java app with webstart. I get the following error

Missing signed entry in resource: 
http://localhost/formdesigner/lib/xercesImpl.jar

The xercesImpl.jar is jarsigned

any idea

Johan

---
 * Synchronet * The Whitehouse BBS --- whitehouse.hulds.com --- check it out free usenet!
--- Synchronet 3.15a-Win32 NewsLink 1.92
Time Warp of the Future BBS - telnet://time.synchro.net:24

[toc] | [next] | [standalone]

#2684

  To: comp.lang.java.gui
On Wed, 24 Oct 2007 20:53:46 +0200, "Bruintje Beer" <me@knoware.nl>
wrote, quoted or indirectly quoted someone who said :

>The xercesImpl.jar is jarsigned

IIRC all the jars must be signed with the same certificate.
-- 
Roedy Green Canadian Mind Products
The Java Glossary
http://mindprod.com

---
 * Synchronet * The Whitehouse BBS --- whitehouse.hulds.com --- check it out free usenet!
--- Synchronet 3.15a-Win32 NewsLink 1.92
Time Warp of the Future BBS - telnet://time.synchro.net:24

[toc] | [prev] | [next] | [standalone]

#2685

  To: comp.lang.java.gui
On Wed, 24 Oct 2007 19:46:00 GMT, Roedy Green
<see_website@mindprod.com.invalid> wrote, quoted or indirectly quoted
someone who said :

>>The xercesImpl.jar is jarsigned
>
>IIRC all the jars must be signed with the same certificate.

The problem is the user has to ok the certificate. If you had ten jars
all signed with different certs, the user would have to ok them all
individually. That would drive users nuts.  So I think Sun said, ONE
CERT ONLY.
-- 
Roedy Green Canadian Mind Products
The Java Glossary
http://mindprod.com

---
 * Synchronet * The Whitehouse BBS --- whitehouse.hulds.com --- check it out free usenet!
--- Synchronet 3.15a-Win32 NewsLink 1.92
Time Warp of the Future BBS - telnet://time.synchro.net:24

[toc] | [prev] | [next] | [standalone]

#2686

  To: comp.lang.java.gui
Roedy Green <see_website@mindprod.com.invalid> writes:

> The problem is the user has to ok the certificate. If you had ten jars
> all signed with different certs, the user would have to ok them all
> individually. That would drive users nuts.  So I think Sun said, ONE
> CERT ONLY.

Doing it one-by-one would certainly driver users insane.

It seems that is more of an interface issue.  One could imagine a single
dialog that would allow the examination and approval of multiple
certificates.

Now, granted, that would be more cumbersome, and one could imagine
potential attempts to sneak in an unrecognized certificate in a longer
list, but it would at least be something to consider.


-- 
Thomas A. Russ,  USC/Information Sciences Institute

---
 * Synchronet * The Whitehouse BBS --- whitehouse.hulds.com --- check it out free usenet!
--- Synchronet 3.15a-Win32 NewsLink 1.92
Time Warp of the Future BBS - telnet://time.synchro.net:24

[toc] | [prev] | [next] | [standalone]

#2689

  To: comp.lang.java.gui
On Oct 25, 8:42 am, t...@sevak.isi.edu (Thomas A. Russ) wrote:
...
> It seems that is more of an interface issue.  One could imagine a single
> dialog that would allow the examination and approval of multiple
> certificates.

With 'lazy' downloads - the app. might go to load
'secure' Jar's days, weeks or months after the app.
is initially installed.  These jar's might be coming
from extensions that have different permissions from
the original application, and originat from different
sites.

( Mind you - the 'approve mulitple certs.' idea would
probably work for 90%+ of current JWS apps. - few
people seem to be using extensions or lazy downloads
to any good effect. )

Sun also probably would not want to mix certificates
from trusted and untrusted sources, a 'self signed'
certificate will produce a different warning from
one that was issued by a CA.

Andrew T.

---
 * Synchronet * The Whitehouse BBS --- whitehouse.hulds.com --- check it out free usenet!
--- Synchronet 3.15a-Win32 NewsLink 1.92
Time Warp of the Future BBS - telnet://time.synchro.net:24

[toc] | [prev] | [next] | [standalone]

#2690

  To: comp.lang.java.gui
On 24 Oct 2007 15:42:47 -0700, tar@sevak.isi.edu (Thomas A. Russ)
wrote, quoted or indirectly quoted someone who said :

>Now, granted, that would be more cumbersome, and one could imagine
>potential attempts to sneak in an unrecognized certificate in a longer
>list, but it would at least be something to consider.

there is another reason.  If you ok one cert, you have one person to
blame if it does damage.  

Think of a general contractor giving you a list of 10 subcontractors
to ok for some home improvements.  You don't know them.  You want HIM
to vouch for them, and to be responsible for any damage they do.
-- 
Roedy Green Canadian Mind Products
The Java Glossary
http://mindprod.com

---
 * Synchronet * The Whitehouse BBS --- whitehouse.hulds.com --- check it out free usenet!
--- Synchronet 3.15a-Win32 NewsLink 1.92
Time Warp of the Future BBS - telnet://time.synchro.net:24

[toc] | [prev] | [next] | [standalone]

#2699

  To: comp.lang.java.gui
Hi!

Roedy Green wrote:

> IIRC all the jars must be signed with the same certificate.

Only the jars in one jnlp file must be signed with the same certificate.
You can always have multiple jnlp files in a master-slave relationship.
The main jar file will contain your jars and pointers to the other jars.
I just did this with our stuff and bouncycastle in the dependent jnlp.

brgds

-- 
Gunter Herrmann
Orlando, Fl, USA

---
 * Synchronet * The Whitehouse BBS --- whitehouse.hulds.com --- check it out free usenet!
--- Synchronet 3.15a-Win32 NewsLink 1.92
Time Warp of the Future BBS - telnet://time.synchro.net:24

[toc] | [prev] | [next] | [standalone]

#2700

  To: comp.lang.java.gui
On Mon, 29 Oct 2007 10:24:07 -0400, Gunter Herrmann
<notformail0106@earthlink.net> wrote, quoted or indirectly quoted
someone who said :

>Only the jars in one jnlp file must be signed with the same certificate.
>You can always have multiple jnlp files in a master-slave relationship.

I have never heard of this. Is there an example posted of how this
works?
-- 
Roedy Green Canadian Mind Products
The Java Glossary
http://mindprod.com

---
 * Synchronet * The Whitehouse BBS --- whitehouse.hulds.com --- check it out free usenet!
--- Synchronet 3.15a-Win32 NewsLink 1.92
Time Warp of the Future BBS - telnet://time.synchro.net:24

[toc] | [prev] | [next] | [standalone]

#2702

  To: comp.lang.java.gui
Roedy Green wrote:
> On Mon, 29 Oct 2007 10:24:07 -0400, Gunter Herrmann
> <notformail0106@earthlink.net> wrote, quoted or indirectly quoted
> someone who said :
> 
>> Only the jars in one jnlp file must be signed with the same certificate.
>> You can always have multiple jnlp files in a master-slave relationship.
> 
> I have never heard of this. Is there an example posted of how this
> works?

http://dawes.za.net/rogan/webscarab/WebScarab.jnlp refers to 
./lib/help.jnlp, which includes the JavaHelp jar. My jars (and otherwise 
unsigned dependencies) are signed with my own private key, but the 
JavaHelp jar is already signed by Sun, so I use a separate JNLP to save 
me having to un-sign and re-sign the jar myself.

As a downside, the webstart client now has to check two .jnlp files for 
updates each time it starts up, adding latency, but "them's the breaks", 
I guess.

Rogan

---
 * Synchronet * The Whitehouse BBS --- whitehouse.hulds.com --- check it out free usenet!
--- Synchronet 3.15a-Win32 NewsLink 1.92
Time Warp of the Future BBS - telnet://time.synchro.net:24

[toc] | [prev] | [next] | [standalone]

#2704

  To: comp.lang.java.gui
Rogan Dawes wrote:
> As a downside, the webstart client now has to check two .jnlp files for 
> updates each time it starts up, adding latency, but "them's the breaks", 
> I guess.

If you use the version download protocol it only has to check the main 
jnlp file. I.e. if you specify versions for every resource referenced 
from the application jnlp file then WebStart can check if it has those 
versions without further reference to the server.

In addition the request for the application JNLP file will include the 
modification date of the version it already has. The server does not 
need to send the JNLP file content with the reply if the modification 
date is still current. Thus all that is required is a single round trip 
with negligible content when nothing has changed.

Mark Thornton

---
 * Synchronet * The Whitehouse BBS --- whitehouse.hulds.com --- check it out free usenet!
--- Synchronet 3.15a-Win32 NewsLink 1.92
Time Warp of the Future BBS - telnet://time.synchro.net:24

[toc] | [prev] | [next] | [standalone]

#2706

  To: comp.lang.java.gui
Mark Thornton wrote:
> Rogan Dawes wrote:
>> As a downside, the webstart client now has to check two .jnlp files 
>> for updates each time it starts up, adding latency, but "them's the 
>> breaks", I guess.
> 
> If you use the version download protocol it only has to check the main 
> jnlp file. I.e. if you specify versions for every resource referenced 
> from the application jnlp file then WebStart can check if it has those 
> versions without further reference to the server.
> 
> In addition the request for the application JNLP file will include the 
> modification date of the version it already has. The server does not 
> need to send the JNLP file content with the reply if the modification 
> date is still current. Thus all that is required is a single round trip 
> with negligible content when nothing has changed.
> 
> Mark Thornton

While we are talking about WebStart, I thought I'd mention a PHP utility 
that I wrote to allow those of us with cheap hosting plans to host 
WebStart-able applications easily.

It works much as the Java JNLPDownloadServlet does, apart from 
supporting versioning of the jars.

i.e. it will expand the $$ variables in the same way as the 
JNLPDownloadServlet, as well as sending the Pack2000 version of jars if 
the requestor indicates that they can handle them.

This works quite nicely with maven2's webstart plugin, since it creates 
these automatically for you.

I posted about it at: 
http://forum.springframework.org/showpost.php?p=121432&postcount=5

Comments welcome.

Rogan

---
 * Synchronet * The Whitehouse BBS --- whitehouse.hulds.com --- check it out free usenet!
--- Synchronet 3.15a-Win32 NewsLink 1.92
Time Warp of the Future BBS - telnet://time.synchro.net:24

[toc] | [prev] | [next] | [standalone]

#2707

  To: comp.lang.java.gui
Rogan Dawes wrote:
> Mark Thornton wrote:
> 
> While we are talking about WebStart, I thought I'd mention a PHP utility 
> that I wrote to allow those of us with cheap hosting plans to host 
> WebStart-able applications easily.
> 
> It works much as the Java JNLPDownloadServlet does, apart from 
> supporting versioning of the jars.
> 
> i.e. it will expand the $$ variables in the same way as the 
> JNLPDownloadServlet, as well as sending the Pack2000 version of jars if 
> the requestor indicates that they can handle them.
> 
> This works quite nicely with maven2's webstart plugin, since it creates 
> these automatically for you.
> 
> I posted about it at: 
> http://forum.springframework.org/showpost.php?p=121432&postcount=5
> 

How strange --- I've done one too! Mine is running on a little Synology 
DS-101j NAS device. One catch is that this device doesn't support the 
Apache mod_rewrite or the addHandler functionality and thus every 
resource to be downloaded needs a little PHP stub, and thus all the URLs 
end in .PHP (e.g. myapp.jar.php). This introduces a couple of further 
issues:

1. The first release of Java 6 doesn't then work with signed jar files. 
It gives a security exception. Subsequent (and previous) releases don't 
have this problem.

2. Java 6 doesn't include pack.gz in the list of accepted encodings. 
Apparently this is also tied to the extension rather than the context.

3. Although the application then works, it never appears in the Java 
control panel applet's list of applications. Nor does it offer to create 
a shortcut or start menu entry.

My PHP script processes any local URL's in JNLP files to append the 
necessary .PHP extension, as well replacing $$ macros.

Anyway subject to the caveats above, I have now got it to work. Those 
issues and others meant it was a lot harder and took longer than I expected.

As far as I can see the big problem is there is no minimum standard of 
what you can expect from a host in terms of what is permitted in 
.htaccess files. My Synology device is very restrictive in this respect. 
PHP also has a lot of 'optional' elements, so many useful functions may 
simply be missing. One of the advantages of Java is that
so much is guaranteed to be present. Not so with PHP.

Mark Thornton
mthornton at optrak.co.uk

---
 * Synchronet * The Whitehouse BBS --- whitehouse.hulds.com --- check it out free usenet!
--- Synchronet 3.15a-Win32 NewsLink 1.92
Time Warp of the Future BBS - telnet://time.synchro.net:24

[toc] | [prev] | [next] | [standalone]

#2791

  To: comp.lang.java.gui
Mark Thornton wrote:
> Rogan Dawes wrote:
>> Mark Thornton wrote:
>>
>> While we are talking about WebStart, I thought I'd mention a PHP 
>> utility that I wrote to allow those of us with cheap hosting plans to 
>> host WebStart-able applications easily.
>>

> How strange --- I've done one too! Mine is running on a little Synology 
> DS-101j NAS device. One catch is that this device doesn't support the 
> Apache mod_rewrite or the addHandler functionality and thus every 
> resource to be downloaded needs a little PHP stub, and thus all the URLs 
> end in .PHP (e.g. myapp.jar.php). This introduces a couple of further 
> issues:
> 
> 1. The first release of Java 6 doesn't then work with signed jar files. 
> It gives a security exception. Subsequent (and previous) releases don't 
> have this problem.

I have seen a problem with Java 6 where it throws SecurityExceptions if 
the signed .jar is empty. Is that what you are referring to?

> 2. Java 6 doesn't include pack.gz in the list of accepted encodings. 
> Apparently this is also tied to the extension rather than the context.
> 
> 3. Although the application then works, it never appears in the Java 
> control panel applet's list of applications. Nor does it offer to create 
> a shortcut or start menu entry.

You are probably missing something simple. You might like to compare the 
series of conversations between WebStart and your device, and between 
WebStart and a real download servlet using an intercepting proxy like 
WebScarab. You will probably see some missing headers or something.

> My PHP script processes any local URL's in JNLP files to append the 
> necessary .PHP extension, as well replacing $$ macros.
> 
> Anyway subject to the caveats above, I have now got it to work. Those 
> issues and others meant it was a lot harder and took longer than I 
> expected.

Neat.

> As far as I can see the big problem is there is no minimum standard of 
> what you can expect from a host in terms of what is permitted in 
> .htaccess files. My Synology device is very restrictive in this respect. 
> PHP also has a lot of 'optional' elements, so many useful functions may 
> simply be missing. One of the advantages of Java is that
> so much is guaranteed to be present. Not so with PHP.

Yes, you are absolutely right. The lack of consistency is a pity. I did 
tried not to use anything *too* sophisticated, but I guess you are 
running in a seriously resource constrained environment.

> Mark Thornton

Regards,

Rogan
P.S. Sorry for the late reply, I have been travelling without access to 
my news feed.

---
 * Synchronet * The Whitehouse BBS --- whitehouse.hulds.com --- check it out free usenet!
--- Synchronet 3.15a-Win32 NewsLink 1.92
Time Warp of the Future BBS - telnet://time.synchro.net:24

[toc] | [prev] | [next] | [standalone]

#2794

  To: comp.lang.java.gui
Rogan Dawes wrote:
> Mark Thornton wrote:
>> 3. Although the application then works, it never appears in the Java 
>> control panel applet's list of applications. Nor does it offer to 
>> create a shortcut or start menu entry.
> 
> You are probably missing something simple. You might like to compare the 
> series of conversations between WebStart and your device, and between 
> WebStart and a real download servlet using an intercepting proxy like 
> WebScarab. You will probably see some missing headers or something.

Very likely, but it will be a while before I can get back to look at it. 
I'm snowed under with other work.

> Yes, you are absolutely right. The lack of consistency is a pity. I did 
> tried not to use anything *too* sophisticated, but I guess you are 
> running in a seriously resource constrained environment.

Very much resource constrained, but that is also part of the appeal --- 
unlike my main computer it is left on 24/7 and consumes very little power.

Mark Thornton

---
 * Synchronet * The Whitehouse BBS --- whitehouse.hulds.com --- check it out free usenet!
--- Synchronet 3.15a-Win32 NewsLink 1.92
Time Warp of the Future BBS - telnet://time.synchro.net:24

[toc] | [prev] | [next] | [standalone]

#2709

  To: comp.lang.java.gui
Rogan Dawes wrote:
> Mark Thornton wrote:
> While we are talking about WebStart, I thought I'd mention a PHP utility 
> that I wrote to allow those of us with cheap hosting plans to host 
> WebStart-able applications easily.

Incidentally my my version also recognises the version download 
protocol, with versions specified by both the filename encoding and the 
version.xml file.

Mark Thornton

---
 * Synchronet * The Whitehouse BBS --- whitehouse.hulds.com --- check it out free usenet!
--- Synchronet 3.15a-Win32 NewsLink 1.92
Time Warp of the Future BBS - telnet://time.synchro.net:24

[toc] | [prev] | [next] | [standalone]

#2705

  To: comp.lang.java.gui
On Tue, 30 Oct 2007 11:53:53 +0200, Rogan Dawes <discard@dawes.za.net>
wrote, quoted or indirectly quoted someone who said :

>http://dawes.za.net/rogan/webscarab/WebScarab.jnlp refers to 
>./lib/help.jnlp, which includes the JavaHelp jar. My jars (and otherwise 
>unsigned dependencies) are signed with my own private key, but the 
>JavaHelp jar is already signed by Sun, so I use a separate JNLP to save 
>me having to un-sign and re-sign the jar myself.

Let's figure out how this works.  Here is the main JNLP file.


<jnlp spec="1.0" codebase="http://dawes.za.net/rogan/webscarab/"
href="http://dawes.za.net/rogan/webscarab/WebScarab.jnlp">
  <information>
    <title>WebScarab</title>
    <vendor>Rogan Dawes</vendor>
    <homepage href="http://dawes.za.net/rogan/webscarab/"/>
    <description>A web application testing tool.</description>
    <description kind="short">A web application testing
tool.</description>
    <description kind="tooltip">WebScarab</description>
    <icon href="http://dawes.za.net/rogan/webscarab/icon.gif"
height="64" width="64" kind="default"/>
    <icon href="http://dawes.za.net/rogan/webscarab/splash.gif"
kind="splash"/>
    <shortcut online="true">
      <desktop/>
      <menu submenu="WebScarab"/>
    </shortcut>
    <offline-allowed/>
  </information>
  <security>
    <all-permissions/>
  </security>
  <update check="timeout" policy="always"/>
  <resources>
    <property name="com.apple.macos.useScreenMenuBar" value="true"/>
    <property name="apple.laf.useScreenMenuBar" value="true"/>
    <property name="com.apple.mrj.application.apple.menu.about.name"
value="WebScarab"/>
    <java initial-heap-size="134217728" max-heap-size="536870912"
href="http://java.sun.com/products/autodl/j2se" version="1.6.0"/>
    <java initial-heap-size="134217728" max-heap-size="536870912"
href="http://java.sun.com/products/autodl/j2se" version="1.6+"/>
    <java initial-heap-size="134217728" max-heap-size="536870912"
href="http://java.sun.com/products/autodl/j2se" version="1.5.0_06"/>
    <java initial-heap-size="134217728" max-heap-size="536870912"
href="http://java.sun.com/products/autodl/j2se" version="1.5.0_05"/>
    <java initial-heap-size="134217728" max-heap-size="536870912"
href="http://java.sun.com/products/autodl/j2se" version="1.5.0_04"/>
    <java initial-heap-size="134217728" max-heap-size="536870912"
href="http://java.sun.com/products/autodl/j2se" version="1.5.0_03"/>
    <java initial-heap-size="134217728" max-heap-size="536870912"
href="http://java.sun.com/products/autodl/j2se" version="1.5.0_02"/>
    <java initial-heap-size="134217728" max-heap-size="536870912"
href="http://java.sun.com/products/autodl/j2se" version="1.5.0"/>
    <java initial-heap-size="134217728" max-heap-size="536870912"
href="http://java.sun.com/products/autodl/j2se" version="1.5+"/>
    <java initial-heap-size="134217728" max-heap-size="536870912"
href="http://java.sun.com/products/autodl/j2se" version="1.4.2_10"/>
    <java initial-heap-size="134217728" max-heap-size="536870912"
href="http://java.sun.com/products/autodl/j2se" version="1.4.2_09"/>
    <java initial-heap-size="134217728" max-heap-size="536870912"
href="http://java.sun.com/products/autodl/j2se" version="1.4.2_08"/>
    <java initial-heap-size="134217728" max-heap-size="536870912"
href="http://java.sun.com/products/autodl/j2se" version="1.4.2_07"/>
    <java initial-heap-size="134217728" max-heap-size="536870912"
href="http://java.sun.com/products/autodl/j2se" version="1.4.2_06"/>
    <java initial-heap-size="134217728" max-heap-size="536870912"
href="http://java.sun.com/products/autodl/j2se" version="1.4.2_05"/>
    <java initial-heap-size="134217728" max-heap-size="536870912"
href="http://java.sun.com/products/autodl/j2se" version="1.4.2_04"/>
    <java href="http://java.sun.com/products/autodl/j2se"
version="1.4.2_03"/>
    <java href="http://java.sun.com/products/autodl/j2se"
version="1.4.2_02"/>
    <java href="http://java.sun.com/products/autodl/j2se"
version="1.4.2_01"/>
    <java href="http://java.sun.com/products/autodl/j2se"
version="1.4.2+"/>
    <jar href="http://dawes.za.net/rogan/webscarab/webscarab.jar"
download="eager" main="false"/>
    <jar href="http://dawes.za.net/rogan/webscarab/lib/bsf-2.3.0.jar"
download="eager" main="false"/>
    <jar href="http://dawes.za.net/rogan/webscarab/lib/bsh-2.0b1.jar"
download="eager" main="false"/>
    <jar href="http://dawes.za.net/rogan/webscarab/lib/chardet.jar"
download="eager" main="false"/>
    <jar href="http://dawes.za.net/rogan/webscarab/lib/concurrent.jar"
download="eager" main="false"/>
    <jar href="http://dawes.za.net/rogan/webscarab/lib/htmlparser.jar"
download="eager" main="false"/>
    <jar
href="http://dawes.za.net/rogan/webscarab/lib/jcommon-0.8.7.jar"
download="eager" main="false"/>
    <jar
href="http://dawes.za.net/rogan/webscarab/lib/jfreechart-0.9.12.jar"
download="eager" main="false"/>
    <jar
href="http://dawes.za.net/rogan/webscarab/lib/tagsoup-1.0rc2.jar"
download="eager" main="false"/>
    <jar href="http://dawes.za.net/rogan/webscarab/lib/wsdl4j.jar"
download="eager" main="false"/>


-------------------------------------
here's the magic.  You point to a aux JNLP file 
    <extension
href="http://dawes.za.net/rogan/webscarab/lib/help.jnlp" name="Java
Help"/>
-------------------------------------
    <nativelib
href="http://dawes.za.net/rogan/webscarab/lib/windows_x86.jar"
download="eager" main="false"/>
  </resources>
  <application-desc main-class="org.owasp.webscarab.WebScarab"/>
</jnlp>


 ================================================


You normally bundle your Java Web Start application up into signed
jars, just as as you would a signed Applet. You sign them with same
code signing certificate and use the same tool jarsigner.exe. You
usually build you apps and create the jars with ant, just as you would
any Applet or application. 

All jars must be signed with the same certificate. This means you must
unpack and resign jars built by somebody else. However, Rogan Dawes
the author of WebScarab pointed out a way around that restriction. He
discovered that if you have multiple JNLP files, all jars mentioned by
each JNLP file must be signed with the same certificate, but different
JNLP files can be signed with different certificates. Your master JNLP
file includes an auxiliary JNLP file (which references jars signed
with a different certificate) by inserting a line like this in the
<resources> section: 
<extension href="http://dawes.za.net/rogan/webscarab/lib/help.jnlp" 
    name="Java Help"  />

see http://mindprod.com/jgloss/javawebstart.html#SIGNING
-- 
Roedy Green Canadian Mind Products
The Java Glossary
http://mindprod.com

---
 * Synchronet * The Whitehouse BBS --- whitehouse.hulds.com --- check it out free usenet!
--- Synchronet 3.15a-Win32 NewsLink 1.92
Time Warp of the Future BBS - telnet://time.synchro.net:24

[toc] | [prev] | [standalone]

Back to top | Article view | comp.lang.java.gui

csiph-web