unsigned installer issue
843802Jul 2 2001 — edited Jul 9 2001We are trying to deploy the jre 1.3.1 via java web start.
Followings are jnlp files for regular application and
the installer.
<?xml version="1.0" ?>
<!--
regular jnlp file
-->
<jnlp codebase="$$codebase">
<information>
<title>Client</title>
<vendor>Demo</vendor>
<description>experience the system</description>
</information>
<security>
<all-permissions/>
</security>
<resources>
<jar href="ClientDemo.jar" version="1.2"/>
<j2se version="1.3.1" href="j2re.exe" />
</resources>
<application-desc main-class="ClientDemo" />
</jnlp>
<?xml version="1.0" ?>
<!--
installer jnlp file
-->
<jnlp codebase="$$codebase" >
<information>
<title>J2RE Installer</title>
<vendor>Demo</vendor>
</information>
<security>
<all-permissions/>
</security>
<resources>
<j2se version="1.3+"/>
<jar href="Main.jar" />
<jar href="J2re-win.jar" />
<property name="installer.entries" value="2" />
<property name="installer.entry0" value="j2re.exe" />
<property name="installer.entry1" value="setup.iss" />
<property name="installer.instruction" value="$0 -s -a -s -f1$1" />
<property name="installer.reboot" value="false" />
<property name="package.info" value="J2RE package" />
<property name="package.location" value="J2re-win.jar" />
<property name="package.version" value="1.3.1" />
<property name="package.path" value="c:\\program files\\javasoft\\jre\\1.3.1\\bi
n\\javaw.exe" />
</resources>
<installer-desc main-class="Main" />
</jnlp>
all jar files are signed by jarsigner from jdk 1.3.0.
However, when initial the installer, the java web start
complains and throws out "Unsigned application requesting unrestricted access to system" exception.
JNLPException[category: Security Error : Exception: null : LaunchDesc: null ]
at com.sun.javaws.LaunchDownload.checkSignedResourcesHelper(Unknown Source)
at com.sun.javaws.LaunchDownload.checkSignedResources(Unknown Source)
at com.sun.javaws.Launcher.continueLaunch(Unknown Source)
at com.sun.javaws.Launcher.handleApplicationDesc(Unknown Source)
at com.sun.javaws.Launcher.handleLaunchFile(Unknown Source)
at com.sun.javaws.Launcher.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)
With more checking, I found that the java web start
is running on jre 1.2.2 and since jre 1.2.2 doesn't support
the signing algorithm in 1.3, it treats these jar files
as unsigned jar files.
My question, why java web start is running on jre 1.2.2 instead of 1.3?
Following is my jre config in java web start.
platform version | product version
1.2 1.2.2_007
1.3 1.3.0_03
And in the regualr jnlp file, I specify
<j2se version="1.3.1" href="j2re.exe" />
in the installer jnlp file, I specify
<j2se version="1.3+" />
thanks.