FYI, as of Update 51, it now blocks with no option to allow execution.

On Thursday, December 19, 2013 6:21:36 AM UTC-5, Andreas Schilling wrote:
>
> Hi everyone, 
>
> as stated in my answer from some time ago, the issue is that the JNLP for 
> Java versions from v7u45 must be signed. 
> That means the build process for the slave-JAR must be extended 
> accordingly. This is how it works: 
> https://blogs.oracle.com/thejavatutorials/entry/signing_a_jnlp_file 
> https://blogs.oracle.com/thejavatutorials/entry/signing_jar_files_with_a 
>
> Does anyone know whether there is already a JIRA-issue for that? If not, I 
> can create it. 
>
> Mit freundlichen Grüßen / kind regards 
> i.A. Andreas Schilling 
> Enterprise Processes & Software 
> ------------------------------------------------------------------- 
> Dipl. Inf. Andreas Schilling 
> Senior Software Architect 
>
> TWT GmbH 
> Science & Innovation 
> Ernsthaldenstraße 17 
> D-70565 Stuttgart 
>   
> Tel: +49.7 11.21 57 77.6 73 <#> 
> Mobil: +49.1 72.6 22 88 70 <#> 
> E-Mail: [email protected] <javascript:> 
> -------------------------------------------------------------------- 
> www.twt-gmbh.de 
> -------------------------------------------------------------------- 
> Geschäftsführung: Dr. Dimitrios Vartziotis, Joachim Laicher (Stv.), Frank 
> Beutenmüller (Stv.) 
> Registergericht: Amtsgericht Stuttgart, HRB Nr. 212778 
> Umsatzsteuer: ID-Nr.: DE147841145 
> -------------------------------------------------------------------- 
>
>
>
> Von:        Mark <[email protected] <javascript:>> 
> An:        [email protected] <javascript:> 
> Datum:        17.12.2013 16:07 
> Betreff:        Re: Java Version 7, Update 45 warning every time I try 
> starting the slave 
> Gesendet von:        [email protected] <javascript:> 
> ------------------------------
>
>
>
> I am experiencing the same problems. Executed: *java -jar 
> **slave.jar*<http://einz1694:8080/jnlpJars/slave.jar>* 
> -jnlpUrl**http://HOSTNAME:8080/computer/HOSTNAME/slave-agent.jnlp*<http://hostname:8080/computer/HOSTNAME/slave-agent.jnlp>*
>  
> -secret xxxx* 
>   
> And still get the error message "Running this application may be a 
> security risk" 
>   
>
> Op dinsdag 17 december 2013 00:55:24 UTC+1 schreef Mark Waite: 
> No, there is nothing on the server side which needs to be set.  Maybe I'm 
> not understanding the technique you attempted. 
>
> I downloaded the slave.jar file from the Jenkins server to a local 
> directory on my computer. 
> I created a batch file and inserted the "java -jar slave.jar ..." command 
> in the batch file 
> I started the batch file by double clicking it from Windows explorer 
>
> Did you do something different than that? 
>
> Mark Waite 
>
>  
> On Mon, Dec 16, 2013 at 1:38 PM, Adam Westhusing <*[email protected]*> 
> wrote: 
> I tried doing this and still received the security warning.  Is there 
> anything special that needs to be set on the server side to not receive the 
> warning?   
>
>  
> On Mon, Dec 2, 2013 at 3:39 PM, Mark Waite <*[email protected]*> wrote: 
> You can download slave.jar from the link on each slave node definition 
> page.  It is available from 
> *http://localhost:8080/jnlpJars/slave.jar*<http://localhost:8080/jnlpJars/slave.jar>(replace
>  localhost with your Jenkins server host name). 
>
> Mark Waite 
>
>  
> On Mon, Dec 2, 2013 at 12:58 PM, Jeremy Morton <*[email protected]*> 
> wrote: 
> I am not finding slave.jar, and that command errors with:
>  
> Error: Unable to access jarfile slave.jar 
>
> On Friday, November 29, 2013 4:13:31 AM UTC-5, Mikael Larsson wrote: 
> Hi, 
>
> We had the same issue and solved it by using the alternative way to start 
> the jnlp-jar: 
>
>    java -jar slave.jar -jnlpUrl 
> *https://ci.domain.com/jenkins/computer/COMPUTERNAME/slave-agent.jnlp*<https://ci.domain.com/jenkins/computer/COMPUTERNAME/slave-agent.jnlp>
>  
>
>
>
> Den tisdagen den 29:e oktober 2013 kl. 19:25:12 UTC+1 skrev Jeremy Morton: 
> When I run the javaws.exe command line to start slave-agent.jnlp, I now 
> get this Security warning from Java, which implies that in a future Java 
> update, I won't be able to run it at all. 
>   
> Is this something that I need to configure to make Java happy, or is this 
> a Jenkins-side fix? 
>   
> Security Warning 
> Do you want to run this application? 
> Name: hudson.remoting.Launcher 
> Publisher: UNKNOWN 
> Location: *http://jenkinsmaster:8080* <http://jenkinsmaster:8080/> 
> Running applications by UNKNOWN publishers will be blocked in a future 
> release 
> because it is potentially unsafe and a security risk. 
> Risk: This application will run with unrestricted access which may put 
> your computer and personal information at 
> risk. The information provided is unreliable op unknown so it is 
> recommended not to run this application unless 
> you are familiar with its source 
> This application will be blocked in a Future Java security update because 
> the JAR File manifest does not 
> contain the Permissions attribute. Please contact the Publisher for more 
> information. More Information 
> Select the box below, then click Run to start the application 
> I accept the risk and want to run this application  Run Cancel 
>
> -- 
> You received this message because you are subscribed to the Google Groups 
> "Jenkins Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to *[email protected]*.
> For more options, visit 
> *https://groups.google.com/groups/opt_out*<https://groups.google.com/groups/opt_out>
> . 
>
> -- 
> You received this message because you are subscribed to the Google Groups 
> "Jenkins Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to *[email protected]*.
> For more options, visit 
> *https://groups.google.com/groups/opt_out*<https://groups.google.com/groups/opt_out>
> . 
>
> -- 
> You received this message because you are subscribed to the Google Groups 
> "Jenkins Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to *[email protected]*.
> For more options, visit 
> *https://groups.google.com/groups/opt_out*<https://groups.google.com/groups/opt_out>
> . 
>
> -- 
> You received this message because you are subscribed to the Google Groups 
> "Jenkins Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to [email protected] <javascript:>.
> For more options, visit 
> *https://groups.google.com/groups/opt_out*<https://groups.google.com/groups/opt_out>
> . 
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to