JDK-6846531 : REGRESSION application from ocie.net does not work with 6.0_14
  • Type: Bug
  • Component: deploy
  • Sub-Component: webstart
  • Affected Version: 6u14
  • Priority: P2
  • Status: Closed
  • Resolution: Fixed
  • OS: windows_xp,windows_vista
  • CPU: x86
  • Submitted: 2009-05-29
  • Updated: 2010-11-04
  • Resolved: 2009-06-17
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 6 JDK 7
6u15 b02Fixed 7Fixed
Related Reports
Duplicate :  
JDK-6886439 - Different Jars signed with tsa (Timestamping Authority) doesn't work with JNLP
Relates :  
JDK-6869244 - REGRESSION: NoClassDefFoundError exception throws with signed apps
Description
J2SE Version (please include all output from java -version flag):

java version "1.6.0_14"
Java(TM) SE Runtime Environment (build 1.6.0_14-b08)
Java HotSpot(TM) Client VM (build 14.0-b16, mixed mode, sharing)

Does this problem occur on J2SE 1.4.x or 5.0.x ?  Yes / No (pick one)

Works fine in JDK 6.0_13


Operating System Configuration Information (be specific):
Windows Vista Business SP1

Hardware Configuration Information (be specific):
HP Pavillion dv9000
Windows Vista Business SP1 32 bit
3 GB RAM
Intel Core 2 Duo T9300



Bug Description:
Unsigned applications do not work with JDK 6.0_14.
Even though this is a valid webapp, I get an error.  This link works for update 13 and prior.

Reading certificates from 194224 https://www.ocie.net/JViewer/lib/dsi/clientC.jar | C:\Users\mac\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6\a80db86-525ee63f.idx
Reading certificates from 24964 https://www.ocie.net/JViewer/lib/other/commons-httpclient.jar | C:\Users\mac\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\1a4fffc1-4b20f693.idx
#### Java Web Start Error:
#### JAR resources in JNLP file are not signed by same certificate


Goto https://www.ocie.net/JViewer/jnlp/viewer.jnlp

The above link will work on update 13 and before.  This will not work on update 14.  




Steps to Reproduce (be specific):
Comments
EVALUATION This is a bug in our JRE 6u14, it should be fixed it JRE 6u15. Basically we compare a CodeSigner object in 6u14, which is incorrect. the CodeSigner object include CertPath and TimeStamp object, we should only compare CertPath object because the TimeStamp object may vary but if they are in valid period, it should be still good.
02-06-2009
EVALUATION The application at https://www.ocie.net/JViewer/jnlp/viewer.jnlp requests all-permission, so I am changing Synopsis fo`rom "unsigned apps do not work with 1.6.0_14" to "application from ocie.net does not work with 6.0_14". Still remains to be investigated why this app proportedly works with 6u13 and not 6u14.
01-06-2009