[
https://jira.codehaus.org/browse/MWEBSTART-176?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=282112#comment-282112
]
Paul Austdal commented on MWEBSTART-176:
----------------------------------------
More information regarding issues with JNLP without codebase attribute:
[Oracle Forums - Deploying a fully signed application without the codebase
attribute|https://forums.oracle.com/forums/thread.jspa?threadID=2293201&tstart=0]
> Signing of the JNLP file
> ------------------------
>
> Key: MWEBSTART-176
> URL: https://jira.codehaus.org/browse/MWEBSTART-176
> Project: Maven 2.x Webstart Plugin
> Issue Type: New Feature
> Components: sign
> Affects Versions: 1.0-beta-2
> Reporter: Paul Austdal
>
> It would be very nice to have support for signing the JNLP file as part of
> the maven plugin. The installation appears more trustworthy for JNLP-signed
> applications. It can be done now, but it includes several error prone manual
> steps.
> The signing process is really very simple. The final JNLP file should be
> included in the main jar file as {{/JNLP-INF/APPLICATION.JNLP}} before the
> jar file is signed.
> I guess the following tasks have to be taken care of:
> * Add support for a new configuration setting for the plugin in the pom
> file(boolean signJnlp)
> * Add the new setting in {{AbstractBaseJnlpMojo.java}} or
> {{AbstractJnlpMojo.java}} with default value set to false
> * Modify the {{execute()}} method in {{AbstractJnlpMojo.java}} so that the
> final JNLP file is generated before the main jar file is signed. For example
> move the call to {{generateJnlpFile( getWorkDirectory())}} right after the
> call to {{processDependencies()}}.
> * Implement injection of the final JNLP file into the main jar file
> ** Identify the main jar file and extract it
> ** Copy the generated jnlp file to the extracted directory under
> {{/JNLP-INF/APPLICATION.JNLP}}
> ** Create an new main jar archive with the modified content
> ** Copy the main jar file into the lib location for further processing
> (packing and signing)
> When using no codebase (1.6.0_u18+), the JNLP file should not be signed due
> to a bug in Java 6 and 7.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe from this list, please visit:
http://xircles.codehaus.org/manage_email
