[
https://issues.apache.org/jira/browse/FELIX-4281?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13806304#comment-13806304
]
Nicolas Roduit commented on FELIX-4281:
---------------------------------------
I made a very simple test case (see message.zip in attachment) which try to
load a class that doesn't exist with different classloaders:
1) mvn clean package -Djarsigner.alias="your alias"
-Djarsigner.storepass="your pwd" -Djarsigner.keystore="/your_path/keystore.jks"
2) javaws /path/launcher.jnlp (=> don't show the security message)
But with Felix Framework Distribution 4.2.1 (or 4.3):
1) Download distribution
2) Edit the manifest to add the new required attributes:
Codebase=*
Permissions=all-permissions
Trusted-Only=true
Application-Name=Felix
2) sign jars
3) Adapt launcher.jnlp
4) javaws /path/launcher.jnlp (=> show the security message, when it tries to
get the class "dalvik.system.DexFile")
> Security Warning: Felix with Java Web Start
> -------------------------------------------
>
> Key: FELIX-4281
> URL: https://issues.apache.org/jira/browse/FELIX-4281
> Project: Felix
> Issue Type: Bug
> Environment: Windows 7 with Java 7 update 40, 64 bits
> Reporter: Cesar Souza
> Priority: Minor
> Attachments: message.zip, viewer.jnlp
>
>
> Since the release of Java 7 update 40 the following warning occurs when you
> try to execute a signed (with valid certificate) Java Web Start application:
> -----------------------------
> Security Warning
> Do you want to run this application?
> An unsigned application from the location below is requesting permission to
> run.
> http://......
> Running unsigned applications like this will be blocked in a future
> release because it is potentially unsafe and a security risk
> -----------------------------
> Although the Java recognizes the certificate in the first dialog, it shows
> the warning message when the Felix's init method is invoked.
> I have tested a same application over Java 7 update 21 and everything is ok.
--
This message was sent by Atlassian JIRA
(v6.1#6144)
