[
https://issues.apache.org/jira/browse/FELIX-4281?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14019139#comment-14019139
]
Rob Walker commented on FELIX-4281:
-----------------------------------
Still digging into this one.
In fact adding the property check as I suggested above does cure the initial
problem, which also has a fuller investigation described here:
http://mail-archives.apache.org/mod_mbox/felix-users/201310.mbox/%[email protected]%3E
But it moves the problem on to a second case, which is the URLHandlers issue,
also noted in the above:
http://www.mail-archive.com/users%40felix.apache.org/msg14643.html
I don't believe the System property check workaround I proposed is the right
model. I'd say something better would be to test whether we're on Android (the
first case) or JNLP (the second case) and avoid the errant code if so, always
assuming there's no actual wa to code more defensively around the issue.
FWIW - the use of a static initializer in BundleWiringImpl also feels a poor
choice. Anything that can cause issues such as this might be more gracefully
handled in a method that was explicitly called (or not as the case may be).
> Security Warning: Felix with Java Web Start
> -------------------------------------------
>
> Key: FELIX-4281
> URL: https://issues.apache.org/jira/browse/FELIX-4281
> Project: Felix
> Issue Type: Bug
> Environment: Windows 7 with Java 7 update 40, 64 bits
> Reporter: Cesar Souza
> Priority: Minor
> Attachments: message.zip, viewer.jnlp
>
>
> Since the release of Java 7 update 40 the following warning occurs when you
> try to execute a signed (with valid certificate) Java Web Start application:
> -----------------------------
> Security Warning
> Do you want to run this application?
> An unsigned application from the location below is requesting permission to
> run.
> http://......
> Running unsigned applications like this will be blocked in a future
> release because it is potentially unsafe and a security risk
> -----------------------------
> Although the Java recognizes the certificate in the first dialog, it shows
> the warning message when the Felix's init method is invoked.
> I have tested a same application over Java 7 update 21 and everything is ok.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
