Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8032922

Incorrect warning that the application does not have a Permissions attribute

    Details

      Description

      FULL PRODUCT VERSION :
      java version "1.7.0_51"
      Java(TM) SE Runtime Environment (build 1.7.0_51-b13)
      Java HotSpot(TM) 64-Bit Server VM (build 24.51-b03, mixed mode)


      ADDITIONAL OS VERSION INFORMATION :
      Linux garfield 3.8.0-33-generic #48-Ubuntu SMP Wed Oct 23 09:16:58 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux


      A DESCRIPTION OF THE PROBLEM :
      Whenever I try to launch a signed application via webstart, I get a warning saying that the Permissions attribute is missing from the manifest. However the manifest file does contain the required Permissions attribute.

      I have determined that this error is related to the use of the JNLP servlet with versioning. I am using the same JNLP servlet distributed with JDK 1.7u51 The versioning information is important in our setup.

      STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
      Produce signed jar file with Permissions, Codebase and other attributes in Manifest file.
      Launch jar via JNLP, using the JNLP servlet with version information.

      EXPECTED VERSUS ACTUAL BEHAVIOR :
      EXPECTED -
      Application runs without warnings.
      ACTUAL -
      Dialog with yellow warning is displayed

      ERROR MESSAGES/STACK TRACES THAT OCCUR :
      This application will be blocked in a future Java security update because the JAR file manifest does not contain the Permissions attribute. Please contact the Publisher for more information. More Information

      REPRODUCIBILITY :
      This bug can be reproduced always.

      ---------- BEGIN SOURCE ----------
      Manifest-Version: 1.0
      Application-Library-Allowable-Codebase: *
      Trusted-Only: true
      Application-Name: Test
      Build-Jdk: 1.7.0_51
      Built-By: rac
      Permissions: sandbox
      Created-By: Apache Maven
      Main-Class: net.megabyte.cert.certtest2.Main
      Codebase: 192.168.1.94:8080
      Archiver-Version: Plexus Archiver

      Name: META-INF/maven/net.megabyte.cert/CertTest2/pom.xml
      SHA-256-Digest: liusFtzezRbdZay+WH81EYrnRUbkfl95qJhExt2N8cM=

      Name: net/megabyte/cert/certtest2/Main$1.class
      SHA-256-Digest: xA22t+x/1e1oVk8+r2QiNyPCC4QrS5YUmaz6iPJRxlI=

      Name: net/megabyte/cert/certtest2/Main$2.class
      SHA-256-Digest: VjO5zpchCApx+sr+TWOnzPpi8NNyuSuBWd9W/eoAN0c=

      Name: net/megabyte/cert/certtest2/Main$2$1.class
      SHA-256-Digest: D3OPPPMzTbxEVczhxmz+SjeGwGiQxENIi1FGzJ5mm+Y=

      Name: META-INF/maven/net.megabyte.cert/CertTest2/pom.properties
      SHA-256-Digest: lN2F6xZr5n9nGH6hlROugCAv+Qa6lKY0KeSY2/Tzi2U=

      Name: net/megabyte/cert/certtest2/Main.class
      SHA-256-Digest: U36CjmLy4KrxCzFFMQ54J8P6tBucWxURbJZcf9resCc=


      ---------- END SOURCE ----------

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                dtitov Daniil Titov (Inactive)
                Reporter:
                webbuggrp Webbug Group
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: