JDK-8032922 : Incorrect warning that the application does not have a Permissions attribute
  • Type: Bug
  • Component: deploy
  • Sub-Component: webstart
  • Affected Version: 7u51
  • Priority: P3
  • Status: Resolved
  • Resolution: Duplicate
  • OS: linux
  • Submitted: 2014-01-17
  • Updated: 2014-09-16
  • Resolved: 2014-09-16
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 8
8u40Resolved
Related Reports
Duplicate :  
Description
FULL PRODUCT VERSION :
java version "1.7.0_51"
Java(TM) SE Runtime Environment (build 1.7.0_51-b13)
Java HotSpot(TM) 64-Bit Server VM (build 24.51-b03, mixed mode)


ADDITIONAL OS VERSION INFORMATION :
Linux garfield 3.8.0-33-generic #48-Ubuntu SMP Wed Oct 23 09:16:58 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux


A DESCRIPTION OF THE PROBLEM :
Whenever I try to launch a signed application via webstart, I get a warning saying that the Permissions attribute is missing from the manifest. However the manifest file does contain the required Permissions attribute.

I have determined that this error is related to the use of the JNLP servlet with versioning. I am using the same JNLP servlet distributed with JDK 1.7u51 The versioning information is important in our setup.

STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
Produce signed jar file with Permissions, Codebase and other attributes in Manifest file.
Launch jar via JNLP, using the JNLP servlet with version information.

EXPECTED VERSUS ACTUAL BEHAVIOR :
EXPECTED -
Application runs without warnings.
ACTUAL -
Dialog with yellow warning is displayed

ERROR MESSAGES/STACK TRACES THAT OCCUR :
This application will be blocked in a future Java security update because the JAR file manifest does not contain the Permissions attribute. Please contact the Publisher for more information. More Information

REPRODUCIBILITY :
This bug can be reproduced always.

---------- BEGIN SOURCE ----------
Manifest-Version: 1.0
Application-Library-Allowable-Codebase: *
Trusted-Only: true
Application-Name: Test
Build-Jdk: 1.7.0_51
Built-By: rac
Permissions: sandbox
Created-By: Apache Maven
Main-Class: net.megabyte.cert.certtest2.Main
Codebase: 192.168.1.94:8080
Archiver-Version: Plexus Archiver

Name: META-INF/maven/net.megabyte.cert/CertTest2/pom.xml
SHA-256-Digest: liusFtzezRbdZay+WH81EYrnRUbkfl95qJhExt2N8cM=

Name: net/megabyte/cert/certtest2/Main$1.class
SHA-256-Digest: xA22t+x/1e1oVk8+r2QiNyPCC4QrS5YUmaz6iPJRxlI=

Name: net/megabyte/cert/certtest2/Main$2.class
SHA-256-Digest: VjO5zpchCApx+sr+TWOnzPpi8NNyuSuBWd9W/eoAN0c=

Name: net/megabyte/cert/certtest2/Main$2$1.class
SHA-256-Digest: D3OPPPMzTbxEVczhxmz+SjeGwGiQxENIi1FGzJ5mm+Y=

Name: META-INF/maven/net.megabyte.cert/CertTest2/pom.properties
SHA-256-Digest: lN2F6xZr5n9nGH6hlROugCAv+Qa6lKY0KeSY2/Tzi2U=

Name: net/megabyte/cert/certtest2/Main.class
SHA-256-Digest: U36CjmLy4KrxCzFFMQ54J8P6tBucWxURbJZcf9resCc=


---------- END SOURCE ----------