Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.java.programmer > #31280 > unrolled thread

JDK 1.8.0_40 JNLP warning

Back to article view | Back to comp.lang.java.programmer

Contents

  JDK 1.8.0_40 JNLP warning Roedy Green <see_website@mindprod.com.invalid> - 2015-03-06 15:53 -0800
    Re: JDK 1.8.0_40 JNLP warning Wayne <nospam@all.invalid> - 2015-03-06 19:05 -0500
      Re: JDK 1.8.0_40 JNLP warning Arne Vajhøj <arne@vajhoej.dk> - 2015-03-06 19:48 -0500
      Re: JDK 1.8.0_40 JNLP warning Andreas Leitgeb <avl@auth.logic.tuwien.ac.at> - 2015-03-07 08:05 +0000
        Re: JDK 1.8.0_40 JNLP warning Wayne <nospam@all.invalid> - 2015-03-07 05:35 -0500
        Re: JDK 1.8.0_40 JNLP warning Roedy Green <see_website@mindprod.com.invalid> - 2015-03-09 01:36 -0700
      Re: JDK 1.8.0_40 JNLP warning Roedy Green <see_website@mindprod.com.invalid> - 2015-03-09 01:34 -0700

#31280 — JDK 1.8.0_40 JNLP warning

JDK 1.8.0_40 insists that JNLP files are signed if they contain
properties.  Even you use an older JDK, your clients might use
1.8.0_40
-- 
Roedy Green Canadian Mind Products http://mindprod.com
If our brains were simple enough to understand, we wouldn't
be smart enough to understand them.

[toc] | [next] | [standalone]

#31281

On 3/6/2015 6:53 PM, Roedy Green wrote:
> JDK 1.8.0_40 insists that JNLP files are signed if they contain
> properties.  Even you use an older JDK, your clients might use
> 1.8.0_40

JNLP files are text (XML) files, so how can they be signed?

-- 
Wayne

[toc] | [prev] | [next] | [standalone]

#31282

On 3/6/2015 7:05 PM, Wayne wrote:
> On 3/6/2015 6:53 PM, Roedy Green wrote:
>> JDK 1.8.0_40 insists that JNLP files are signed if they contain
>> properties.  Even you use an older JDK, your clients might use
>> 1.8.0_40
>
> JNLP files are text (XML) files, so how can they be signed?

XML files can be signed.

http://www.w3.org/TR/xmldsig-core/

But whether that is the case here is another question.

Arne

[toc] | [prev] | [next] | [standalone]

#31283

Wayne <nospam@all.invalid> wrote:
> On 3/6/2015 6:53 PM, Roedy Green wrote:
>> JDK 1.8.0_40 insists that JNLP files are signed if they contain
>> properties.  Even you use an older JDK, your clients might use
>> 1.8.0_40
> JNLP files are text (XML) files, so how can they be signed?

"signing a JNLP" means, that it must be included with a predefined
path into the primary jar file, and that jar file (as well as all
others, of course) must be signed.

There exists also an alternative, including a template in the jar
file (with a slightly different predefined path), but I never got
that working.

Of course, the jnlp *also* exists outside the jar, but Java(on the 
client PC) will check, that the downloaded jnlp is the same as the
one in the first jar file.

[toc] | [prev] | [next] | [standalone]

#31284

On 3/7/2015 3:05 AM, Andreas Leitgeb wrote:
> "signing a JNLP" means, that it must be included with a predefined
> path into the primary jar file, and that jar file (as well as all
> others, of course) must be signed.
> 
> There exists also an alternative, including a template in the jar
> file (with a slightly different predefined path), but I never got
> that working.
> 
> Of course, the jnlp *also* exists outside the jar, but Java(on the 
> client PC) will check, that the downloaded jnlp is the same as the
> one in the first jar file.
> 

With that as a hint, I found the information:
<http://docs.oracle.com/javase/8/docs/technotes/guides/deploy/signed_jnlp.html>

Thank you!

-- 
Wayne

[toc] | [prev] | [next] | [standalone]

#31296

On Sat, 7 Mar 2015 08:05:24 +0000 (UTC), Andreas Leitgeb
<avl@auth.logic.tuwien.ac.at> wrote, quoted or indirectly quoted
someone who said :

>
>Of course, the jnlp *also* exists outside the jar, but Java(on the 
>client PC) will check, that the downloaded jnlp is the same as the
>one in the first jar file.

I would have thought they would have invented some <OBJECT syntax on
jar files.
-- 
Roedy Green Canadian Mind Products http://mindprod.com
If our brains were simple enough to understand, we wouldn't
be smart enough to understand them.

[toc] | [prev] | [next] | [standalone]

#31295

On Fri, 06 Mar 2015 19:05:36 -0500, Wayne <nospam@all.invalid> wrote,
quoted or indirectly quoted someone who said :

>
>JNLP files are text (XML) files, so how can they be signed?

see http://mindprod.com/jgloss/jnlp.html#SIGNING

-- 
Roedy Green Canadian Mind Products http://mindprod.com
If our brains were simple enough to understand, we wouldn't
be smart enough to understand them.

[toc] | [prev] | [standalone]

Back to top | Article view | comp.lang.java.programmer

csiph-web