JDK-7058424 : System Security store is not read properly once FX is installed
  • Type: Bug
  • Component: deploy
  • Sub-Component: deployment_toolkit
  • Affected Version: 7
  • Priority: P3
  • Status: Resolved
  • Resolution: Fixed
  • OS: windows_xp
  • CPU: x86
  • Submitted: 2011-06-23
  • Updated: 2011-09-22
  • Resolved: 2011-08-17
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availabitlity Release.

To download the current JDK release, click here.
7u2 b03Fixed 8Fixed
It has been noticed on win7 that after installing fx runtime, applications signed by trusted signer CA are ended up showing as UNKNOWN publisher inside the security pop-up. Main reason could be that there is no security store inside fxruntime/lib/security folder and fx runtime is not able to read security store under jre/lib/security

Steps to reproduce:
1) Install jre7, run bugster application as follows (remove security store from user level)
javaws http://busgter.sfbay.sun.com
Security pop-up is going to be there and one can notice that signer CA is trusted and publisher is displayed as
"Bugster ....Sun Microsystems..."
2) Install fx runtime
3) Close bugster and clean up deployment user home
4) Launch bugster again as javaws http://busgter.sfbay.sun.com
This time on security pop-up you notice publisher as "UNKNOWN" then bug is reproduced

EVALUATION We will try to loading those security files from the latest JRE which installed on user's machine.

EVALUATION It looks after install JavaFX runtime, the Java Webstart app is reading all information from C:/Program Files/Oracle/JavaFX Runtime 2.0/lib/security, is that by design? If so, there is no cacerts file in that directory and that is causing the issue (it only exist in JRE/lib/security), I think we may need to install cacerts file in above JavaFX directory as well? This issue has been reported in JIRA bug: http://javafx-jira.kenai.com/browse/RT-13661 We have decided to fix it in JRE side and will close above JIRA bug.