JDK-8028753 : Confusing Error messages shown by ESL under some blocked scenarios
  • Type: Bug
  • Component: deploy
  • Sub-Component: plugin
  • Affected Version: 7u51,8
  • Priority: P3
  • Status: Resolved
  • Resolution: Fixed
  • OS: generic
  • CPU: generic
  • Submitted: 2013-11-21
  • Updated: 2014-07-29
  • Resolved: 2014-05-14
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 8 JDK 9
8u20 b15Fixed 9Fixed
Description
 java.com verification applet html file located on http://java.com and  the jnlp file at https://java.com

If only http://java.com listed in the Exception Site List,  the applet  blocked by Deployment Rule Set

*** Tested with latest JDK 8 deployment nightly build:
http://rehudson.us.oracle.com/nightlyws/jdk8-deploy/b255_2013-11-20-0301_800/bundles/

In summary, on the system has no deployment rule set

1) If both http://java.com and https://java.com are NOT in the Exception Site List, the applet works fine
2) If only http://java.com listed in the Exception Site List, it is blocked by Deployment Rule Set
The error message is kind of confusing as there is no Deployment Rule Set, it is probably referred via the Exception Site List entry
3)  If https://java.com listed in the Exception  Site List,  the applet works fine
Comments
webrev: http://oklahoma.us.oracle.com/www/webrevs/aherrick/1.9.0/8028753/
10-04-2014
Release team: Approved for deferral.
06-12-2013
SQE-OK to defer this issue since it's already too late to get it fixd for 7u51 or jdk8. Scenario is getting blocked properly but error message shown to end user is quite confusing
27-11-2013
Release team: Is QA Ok with deferring this?
25-11-2013
the drs mechanism is used to implement ESL - given that, we need some mechanism to tell if block rule was generated by : 1.) actual DRS rule 2.) invalid drs file, invalid rule in drs file, or improperly signed drs jar. 3.) partial ELS entry we should have separate error messages displayed for each of these. not a show-stopper for 7u51/JDK8 - defer to later update release
21-11-2013