Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.java.programmer > #27963 > unrolled thread

Breaking JNLP apps

Back to article view | Back to comp.lang.java.programmer

Contents

  Breaking JNLP apps Roedy Green <see_website@mindprod.com.invalid> - 2014-04-06 11:22 -0700
    Re: Breaking JNLP apps Andreas Leitgeb <avl@auth.logic.tuwien.ac.at> - 2014-04-06 20:07 +0000
      Re: Breaking JNLP apps markspace <markspace@nospam.nospam> - 2014-04-06 14:59 -0700
      Re: Breaking JNLP apps markspace <markspace@nospam.nospam> - 2014-04-07 08:34 -0700

#27963 — Breaking JNLP apps

Sun never broke apps with changes to Java, but Oracle did one, and did
it quietly without telling anyone by putting in some sort of error
message to warn you what was happening.

They have stopped supporting the properties feature of JNLP files.
They quietly ignore them.

They will pay attention to them only if you sign your jar file.

This is somewhat awkward for me since I generate JNLP files
dynamically.

It wants you have a real certificate. A self-signed one does not
appear to work.
 
I guess the trick is to duplicate the properties is a *.properties
file and embed them in a resource in the jar.
-- 
Roedy Green Canadian Mind Products http://mindprod.com
"The question of whether machines can think is about as relevant 
as the question of whether submarines can swim"
~ Edsger Wybe Dijkstra (born: 1930-05-11 died: 2002-08-06 at age: 72)

[toc] | [next] | [standalone]

#27964

Roedy Green <see_website@mindprod.com.invalid> wrote:
> They have stopped supporting the properties feature of JNLP files.
> They quietly ignore them.

Unsigned (and self-signed) jar-files have become the unwanted
step-child of oracle.

> They will pay attention to them only if you sign your jar file.

I think I read, that if you rename the properties to let them
start with certain "safe" prefixes, then it might still work.
(At least for a while until they maybe turn that off, too.)

> This is somewhat awkward for me since I generate JNLP files
> dynamically.

There is supposed to be a feature "jnlp-template", where you
embed not the exact jnlp into the signed jar-file, but only
a template version with "*" substituted for those dynamic parts.

I tried that a while ago, and it didn't work for me, which means
that our clients are still stuck at Java 6.

I recently posted here about my jnlp-template problems, but either
no one saw it or no one knew an answer. No one was inclined to post
a followup. The post's subject was
  "difficulties with using signed jnlp template"
its message-id is: <slrnlf9tf8.ngg.avl@gamma.logic.tuwien.ac.at>

[toc] | [prev] | [next] | [standalone]

#27966

On 4/6/2014 1:07 PM, Andreas Leitgeb wrote:
>
> or no one knew an answer. No one was inclined to post


Probably this.  I personally didn't.  I haven't had a chance to work 
with applets in a long time.  I wonder if there's a better forum for 
this, maybe some help line at Oracle or their forum?

[toc] | [prev] | [next] | [standalone]

#27980

On 4/6/2014 1:07 PM, Andreas Leitgeb wrote:

> I recently posted here about my jnlp-template problems, but either
> no one saw it or no one knew an answer. No one was inclined to post
> a followup. The post's subject was
>    "difficulties with using signed jnlp template"
> its message-id is: <slrnlf9tf8.ngg.avl@gamma.logic.tuwien.ac.at>

Here's a blog from Oracle I just happened on.  I wonder if you could 
leave a comment or use their community features to get feedback on the 
issue you're having.

<https://blogs.oracle.com/java-platform-group/entry/new_security_requirements_for_rias>

[toc] | [prev] | [standalone]

Back to top | Article view | comp.lang.java.programmer

csiph-web