Hi Jeremy,

with Java7 u45 some big changes have been made to security handling. We 
were massively affected with our own applications which are also delivered 
via webstart.
You can't do anything, the provider of the application (and the JNLP for 
it) has to take some actions. (or, maybe you also can turn down java 
security settings to basically "none", but usually this is neither wanted 
nor allowed)
In our case this was adding some new manifest headers to all application 
JARs and signing the JNLP as well, not only the JARs.
I will check later whether there is already a JIRA issue for that. I 
believe this is quite important, especially if you're working at a company 
where you can't control what Java versions become installed (and using the 
latest is usually favoured by most sysadmins)

Mit freundlichen Grüßen / kind regards
i.A. Andreas Schilling
Enterprise Processes & Software
-------------------------------------------------------------------
Dipl. Inf. Andreas Schilling
Senior Software Architect

TWT GmbH
Science & Innovation
Ernsthaldenstraße 17
D-70565 Stuttgart
 
Tel: +49.7 11.21 57 77.6 73
Mobil: +49.1 72.6 22 88 70
E-Mail: [email protected]
--------------------------------------------------------------------
www.twt-gmbh.de
--------------------------------------------------------------------
Geschäftsführung: Dr. Dimitrios Vartziotis, Joachim Laicher (Stv.), Frank 
Beutenmüller (Stv.)
Registergericht: Amtsgericht Stuttgart, HRB Nr. 212778
Umsatzsteuer: ID-Nr.: DE147841145
--------------------------------------------------------------------



Von:    Jeremy Morton <[email protected]>
An:     [email protected]
Datum:  29.10.2013 19:25
Betreff:        Java Version 7, Update 45 warning every time I try 
starting the slave
Gesendet von:   [email protected]



When I run the javaws.exe command line to start slave-agent.jnlp, I now 
get this Security warning from Java, which implies that in a future Java 
update, I won't be able to run it at all.
 
Is this something that I need to configure to make Java happy, or is this 
a Jenkins-side fix?
 
Security Warning
Do you want to run this application?
Name: hudson.remoting.Launcher
Publisher: UNKNOWN
Location: http://jenkinsmaster:8080
Running applications by UNKNOWN publishers will be blocked in a future 
release
because it is potentially unsafe and a security risk.
Risk: This application will run with unrestricted access which may put 
your computer and personal information at
risk. The information provided is unreliable op unknown so it is 
recommended not to run this application unless
you are familiar with its source
This application will be blocked in a Future Java security update because 
the JAR File manifest does not
contain the Permissions attribute. Please contact the Publisher for more 
information. More Information
Select the box below, then click Run to start the application
I accept the risk and want to run this application  Run Cancel
-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an 
email to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to