in Applet2Manager, the implementation of getMainDeploymentRuleSet(URL loc) creates CodeRef with:
CodeRef codeRef = new CodeRef(loc, null, isCodebase, false);
second arg (jar version) is always null, instead of fetching the jar version (which may have been set by parameter "cache_version" that has previously been set in the AppContext.
code should be:
String version = (String) ToolkitStore.get().getAppContext().get(
Config.APPCONTEXT_KEY_PREFIX + loc));
CodeRef codeRef = new CodeRef(loc, version, isCodebase, false);
As a result of this problem, a customer is seeing problems using 8u45 with DRS containing cert based rules.
The same problem exists in 7uX, 8uX, and JDK9