FYI, as of Update 51, it now blocks with no option to allow execution.

On Thursday, December 19, 2013 6:21:36 AM UTC-5, Andreas Schilling wrote:
>
> Hi everyone, 
>
> as stated in my answer from some time ago, the issue is that the JNLP for 
> Java versions from v7u45 must be signed. 
> That means the build process for the slave-JAR must be extended 
> accordingly. This is how it works: 
> https://blogs.oracle.com/thejavatutorials/entry/signing_a_jnlp_file 
> https://blogs.oracle.com/thejavatutorials/entry/signing_jar_files_with_a 
>
> Does anyone know whether there is already a JIRA-issue for that? If not, I 
> can create it. 
>
> Mit freundlichen Grüßen / kind regards 
> i.A. Andreas Schilling 
> Enterprise Processes & Software 
> ------------------------------------------------------------------- 
> Dipl. Inf. Andreas Schilling 
> Senior Software Architect 
>
> TWT GmbH 
> Science & Innovation 
> Ernsthaldenstraße 17 
> D-70565 Stuttgart 
>   
> Tel: +49.7 11.21 57 77.6 73 <#> 
> Mobil: +49.1 72.6 22 88 70 <#> 
> E-Mail: andreas....@twt-gmbh.de <javascript:> 
> -------------------------------------------------------------------- 
> www.twt-gmbh.de 
> -------------------------------------------------------------------- 
> Geschäftsführung: Dr. Dimitrios Vartziotis, Joachim Laicher (Stv.), Frank 
> Beutenmüller (Stv.) 
> Registergericht: Amtsgericht Stuttgart, HRB Nr. 212778 
> Umsatzsteuer: ID-Nr.: DE147841145 
> -------------------------------------------------------------------- 
>
>
>
> Von:        Mark <markd...@gmail.com <javascript:>> 
> An:        jenkins...@googlegroups.com <javascript:> 
> Datum:        17.12.2013 16:07 
> Betreff:        Re: Java Version 7, Update 45 warning every time I try 
> starting the slave 
> Gesendet von:        jenkins...@googlegroups.com <javascript:> 
> ------------------------------
>
>
>
> I am experiencing the same problems. Executed: *java -jar 
> **slave.jar*<http://einz1694:8080/jnlpJars/slave.jar>* 
> -jnlpUrl**http://HOSTNAME:8080/computer/HOSTNAME/slave-agent.jnlp*<http://hostname:8080/computer/HOSTNAME/slave-agent.jnlp>*
>  
> -secret xxxx* 
>   
> And still get the error message "Running this application may be a 
> security risk" 
>   
>
> Op dinsdag 17 december 2013 00:55:24 UTC+1 schreef Mark Waite: 
> No, there is nothing on the server side which needs to be set.  Maybe I'm 
> not understanding the technique you attempted. 
>
> I downloaded the slave.jar file from the Jenkins server to a local 
> directory on my computer. 
> I created a batch file and inserted the "java -jar slave.jar ..." command 
> in the batch file 
> I started the batch file by double clicking it from Windows explorer 
>
> Did you do something different than that? 
>
> Mark Waite 
>
>  
> On Mon, Dec 16, 2013 at 1:38 PM, Adam Westhusing <*westh...@gmail.com*> 
> wrote: 
> I tried doing this and still received the security warning.  Is there 
> anything special that needs to be set on the server side to not receive the 
> warning?   
>
>  
> On Mon, Dec 2, 2013 at 3:39 PM, Mark Waite <*mark.ea...@gmail.com*> wrote: 
> You can download slave.jar from the link on each slave node definition 
> page.  It is available from 
> *http://localhost:8080/jnlpJars/slave.jar*<http://localhost:8080/jnlpJars/slave.jar>(replace
>  localhost with your Jenkins server host name). 
>
> Mark Waite 
>
>  
> On Mon, Dec 2, 2013 at 12:58 PM, Jeremy Morton <*raist...@hotmail.com*> 
> wrote: 
> I am not finding slave.jar, and that command errors with:
>  
> Error: Unable to access jarfile slave.jar 
>
> On Friday, November 29, 2013 4:13:31 AM UTC-5, Mikael Larsson wrote: 
> Hi, 
>
> We had the same issue and solved it by using the alternative way to start 
> the jnlp-jar: 
>
>    java -jar slave.jar -jnlpUrl 
> *https://ci.domain.com/jenkins/computer/COMPUTERNAME/slave-agent.jnlp*<https://ci.domain.com/jenkins/computer/COMPUTERNAME/slave-agent.jnlp>
>  
>
>
>
> Den tisdagen den 29:e oktober 2013 kl. 19:25:12 UTC+1 skrev Jeremy Morton: 
> When I run the javaws.exe command line to start slave-agent.jnlp, I now 
> get this Security warning from Java, which implies that in a future Java 
> update, I won't be able to run it at all. 
>   
> Is this something that I need to configure to make Java happy, or is this 
> a Jenkins-side fix? 
>   
> Security Warning 
> Do you want to run this application? 
> Name: hudson.remoting.Launcher 
> Publisher: UNKNOWN 
> Location: *http://jenkinsmaster:8080* <http://jenkinsmaster:8080/> 
> Running applications by UNKNOWN publishers will be blocked in a future 
> release 
> because it is potentially unsafe and a security risk. 
> Risk: This application will run with unrestricted access which may put 
> your computer and personal information at 
> risk. The information provided is unreliable op unknown so it is 
> recommended not to run this application unless 
> you are familiar with its source 
> This application will be blocked in a Future Java security update because 
> the JAR File manifest does not 
> contain the Permissions attribute. Please contact the Publisher for more 
> information. More Information 
> Select the box below, then click Run to start the application 
> I accept the risk and want to run this application  Run Cancel 
>
> -- 
> You received this message because you are subscribed to the Google Groups 
> "Jenkins Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to *jenkinsci-use...@googlegroups.com*.
> For more options, visit 
> *https://groups.google.com/groups/opt_out*<https://groups.google.com/groups/opt_out>
> . 
>
> -- 
> You received this message because you are subscribed to the Google Groups 
> "Jenkins Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to *jenkinsci-use...@googlegroups.com*.
> For more options, visit 
> *https://groups.google.com/groups/opt_out*<https://groups.google.com/groups/opt_out>
> . 
>
> -- 
> You received this message because you are subscribed to the Google Groups 
> "Jenkins Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to *jenkinsci-use...@googlegroups.com*.
> For more options, visit 
> *https://groups.google.com/groups/opt_out*<https://groups.google.com/groups/opt_out>
> . 
>
> -- 
> You received this message because you are subscribed to the Google Groups 
> "Jenkins Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to jenkinsci-use...@googlegroups.com <javascript:>.
> For more options, visit 
> *https://groups.google.com/groups/opt_out*<https://groups.google.com/groups/opt_out>
> . 
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-users+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to