Skip to Content.
Sympa Menu

perfsonar-dev - Re: [pS-dev] AA and Java Web start incompatibilities

Subject: perfsonar development work

List archive

Re: [pS-dev] AA and Java Web start incompatibilities


Chronological Thread 
  • From: "Michael Bischoff" <>
  • To: "Nina Jeliazkova" <>
  • Cc: "GN-JRA1-list" <>, "" <>, "Ca'ndido Rodri'guez Montes" <>
  • Subject: Re: [pS-dev] AA and Java Web start incompatibilities
  • Date: Tue, 6 Nov 2007 21:44:12 +0100 (CET)
  • Importance: Normal

Hello all,

> Hi,
>
>
> The first try to embed AA into Java Web start version of perfsonarUI is
> facing the following problem.
>
> As I learnt from Candido, the AA classes need to use xerces parser, and
> for this purpose the java property "java.endorsed.dirs" has to be set to
> point to xerces classes. This works fine when running locally (from
> command line or development environment as Eclipse), but does not work if
> the endorsed.dirs property is set in JNLP configuration, e.g. the line
> <property name="java.endorsed.dirs" value="/jars/xalan"/>

..zip..

> I am not sure if there is some other way to make the JWS use xerces
> parser necessary for AA classes.
>
> I don't see an workaround here, except abandoning JWS for perfsonarUI.
> (There is also another reason for this).
>
>
> Any ideas?
>
>
> Best regards,
> Nina
>
>
>

As described in
http://java.sun.com/developer/technicalArticles/WebServices/JWS_2/JWS_White_Paper.pdf
chapter 4: security. " The Java Web Start Sandbox
Unsigned JAR files launched by Java Web Start run in the sandbox, meaning
they cannot access local files or the
network. "

and:

"Providing for Functionality Beyond the Sandbox
Java Web Start supports signed JAR files so that your application can work
outside of the sandbox described
above.
Java Web Start verifies that the contents of the JAR file have not changed
since it was signed. If verification of a
digital signature fails, Java Web Start does not run the application.
When the user first runs an application as a signed JAR file, Java Web
Start opens a dialog box displaying the
application's origin based on the signer's certificate. The user can then
make an informed decision regarding
running the application."

I think a signed jar in combination with:
http://java.sun.com/j2se/1.5.0/docs/api/java/lang/System.html#setProperty(java.lang.String,%20java.lang.String)
should allow for setting the right parser.

that aside looking into the dependences creating this problem might not be
a bad idea neither.

regards,

Michael.

Ps. what is the other reason for abandoning jws?



Archive powered by MHonArc 2.6.16.

Top of Page