Re: Security Warning: Felix with Java Web Start

2013-10-29 Thread Nicolas Roduit
Hi, I apply the patch given by Martin (remove the static part in ExtensionManager) and now the message doesn't appear anymore and everything seems to work correctly. The patch is Ok because we don't use the extension manager. I'm also waiting for a cleaner patch. Nicolas Le 26. 10. 13 01:

Re: Security Warning: Felix with Java Web Start

2013-10-27 Thread Nicolas Roduit
I made more investigations and I managed to reproduce the issue with only the Felix framework (4.2.1 and 4.3). This warning dialog appears in framework/BundleWiringImpl.java (line 1320) when it try to find a class which doesn't exist "Class.forName("dalvik.system.DexFile");" I can reproduce

Re: Security Warning: Felix with Java Web Start

2013-10-26 Thread Martin Rytter
Karl, > I'll have to investigate a bit more but for now, you should be good with your > patch. Sounds great. I have been a bit worried about side-effects. It's rarely a good thing to remove code you don't completely understand. Another thing ... I also made the observation pointed out by Nicol

Re: Security Warning: Felix with Java Web Start

2013-10-25 Thread Cesar Souza
Using Trusted-Library: true makes the jar file load in a separate classloader that is the parent of the classloader that loads Applets/WebStart applications. See: https://forums.oracle.com/forums/thread.jspa?threadID=2278127 and also see:http://docs.oracle.com/javase/7/docs/technotes/guides/jweb/m

Re: Security Warning: Felix with Java Web Start

2013-10-25 Thread Karl Pauls
Martin, this is very interesting. Thanks for the detailed report. I was already guessing that it might be related to the code you point out. I'll have to investigate a bit more but for now, you should be good with your patch - If I can't think of anything else, i might have to make it so that we c

Re: Security Warning: Felix with Java Web Start

2013-10-25 Thread Martin Rytter
Hi everyone, I work for a company that have been using Felix with Java Web Start in a core product for several years. Thus, we have recently encountered the security warning discussed on this mailing list and in the issue below: https://issues.apache.org/jira/browse/FELIX-4281 I have been lookin

Re: Security Warning: Felix with Java Web Start

2013-10-24 Thread Cesar Souza
I put Trusted-Library: true in weasis-launcher.jar and felix.jar but the security warning keeps popping up. On Thu, Oct 24, 2013 at 4:05 PM, Cesar Souza wrote: > we can try putting Trusted-Library: true in MANIFEST file of the > weasis-launcher.jar > > > http://docs.oracle.com/javase/7/docs/tec

Re: Security Warning: Felix with Java Web Start

2013-10-24 Thread Cesar Souza
we can try putting Trusted-Library: true in MANIFEST file of the weasis-launcher.jar http://docs.oracle.com/javase/7/docs/technotes/guides/jweb/manifest.html#trusted_library On Wed, Oct 23, 2013 at 6:57 PM, Nicolas Roduit < nicolas.rod...@jmicrovision.com> wrote: > Hi all, > > I had JNLP file i

Re: Security Warning: Felix with Java Web Start

2013-10-23 Thread Nicolas Roduit
Hi all, I had JNLP file in https://issues.apache.org/jira/browse/FELIX-4281 to show the issue. The problem seems to be located in the Felix initialization, but I am not 100% sure because I modified felix.Main (https://github.com/nroduit/Weasis/blob/master/weasis-launcher/src/main/java/org/weas

Re: Security Warning: Felix with Java Web Start

2013-10-17 Thread Rob Walker
Ok. Just a thought Sent from Samsung Mobile Original message From: Cesar Souza Date: 17/10/2013 16:51 (GMT+02:00) To: users@felix.apache.org Subject: Re: Security Warning: Felix with Java Web Start but I developed other application that runs with no warning and I

Re: Security Warning: Felix with Java Web Start

2013-10-17 Thread Cesar Souza
;>>>> >>>>>> Karl >>>>>> >>>>>> >>>>>> On Wed, Oct 16, 2013 at 2:37 PM, Cesar Souza >>>>>> wrote: >>>>>> >>>>>>> Hi guys >>>>>>> >>>

Re: Security Warning: Felix with Java Web Start

2013-10-17 Thread Rob Walker
port back with findings though! - Rob - Original Message - From: "Cesar Souza" To: users@felix.apache.org Sent: Friday, 11 October, 2013 8:55:50 PM Subject: Re: Security Warning: Felix with Java Web Start Thanks, Rob If you have a small example, please attach it to the J

Re: Security Warning: Felix with Java Web Start

2013-10-17 Thread Cesar Souza
e, can you raise the priority of the issue on Jira ? >>>>> >>>>> On Fri, Oct 11, 2013 at 4:00 PM, Rob Walker wrote: >>>>>> >>>>>> Will def update the issue with anything I find. >>>>>> Our examples are anything but small

Re: Security Warning: Felix with Java Web Start

2013-10-16 Thread Rob Walker
t;Cesar Souza" To: users@felix.apache.org Sent: Friday, 11 October, 2013 8:55:50 PM Subject: Re: Security Warning: Felix with Java Web Start Thanks, Rob If you have a small example, please attach it to the Jira issue that I've just created. https://issues.apache.org/jira/browse/FELIX-4281 O

Re: Security Warning: Felix with Java Web Start

2013-10-16 Thread Cesar Souza
/jira/browse/FELIX-4281 >>> > >>> > On Fri, Oct 11, 2013 at 3:42 PM, Rob Walker wrote: >>> >> I have J7u40, but I haven't tested the WebStart aspect since updating. >>> Quite possible it will hit the same problem, saw the warnings in the >&g

Re: Security Warning: Felix with Java Web Start

2013-10-16 Thread Karl Pauls
l report back with findings though! >> > - Rob >> > >> > >> > - Original Message ----- >> > >> > From: "Cesar Souza" >> > To: users@felix.apache.org >> > Sent: Friday, 11 October, 2013 8:55:50 PM >> > S

Re: Security Warning: Felix with Java Web Start

2013-10-16 Thread Karl Pauls
our own app code plus off the shelf libs. > > Will report back with findings though! > > - Rob > > > > > > - Original Message - > > > > From: "Cesar Souza" > > To: users@felix.apache.org > > Sent: Friday, 11 October, 2013 8:55:5

Re: Security Warning: Felix with Java Web Start

2013-10-16 Thread Cesar Souza
felix.apache.org > Sent: Friday, 11 October, 2013 8:55:50 PM > Subject: Re: Security Warning: Felix with Java Web Start > > Thanks, Rob > > If you have a small example, please attach it to the Jira issue that > I've just created. > > https://issues.apache.org/jira/bro

Re: Security Warning: Felix with Java Web Start

2013-10-11 Thread Rob Walker
quot; To: users@felix.apache.org Sent: Friday, 11 October, 2013 8:55:50 PM Subject: Re: Security Warning: Felix with Java Web Start Thanks, Rob If you have a small example, please attach it to the Jira issue that I've just created. https://issues.apache.org/jira/browse/FELIX-4281

Re: Security Warning: Felix with Java Web Start

2013-10-11 Thread Cesar Souza
1 October, 2013 6:52:26 PM > Subject: Re: Security Warning: Felix with Java Web Start > > Hi Rob > > I have already verified all jars in my application. > Are you using the Java 7 update 40 with your web start application ?? > > Is there a way to turn on the debug log in Felix? &

Re: Security Warning: Felix with Java Web Start

2013-10-11 Thread Rob Walker
ot; To: users@felix.apache.org Sent: Friday, 11 October, 2013 6:52:26 PM Subject: Re: Security Warning: Felix with Java Web Start Hi Rob I have already verified all jars in my application. Are you using the Java 7 update 40 with your web start application ?? Is there a way to turn on the deb

Re: Security Warning: Felix with Java Web Start

2013-10-11 Thread Cesar Souza
Thanks, Karl I'm going to create an issue on JIRA right now. I've never worked with Felix. I just need to sign the application with our new certificate. I will try to create a small example if you don't succeed in the next weeks ;) my best regards On Fri, Oct 11, 2013 at 3:23 PM, Karl Pauls wr

Re: Security Warning: Felix with Java Web Start

2013-10-11 Thread Karl Pauls
I'll try to get to it. You might want to create a jira issue and assign it to me. Furthermore, if you want to help: try to get me a failing example (it doesn't have to be your big application - see whether you can get a simple dummy to fail). regards, Karl On Fri, Oct 11, 2013 at 8:14 PM, Cesar

Re: Security Warning: Felix with Java Web Start

2013-10-11 Thread Cesar Souza
Hi Karl Its a big application, so will be not easy to give you an example, because I am not the software developer who works in the project. The exactly same software works fine on Java 7 update 21, 64bits (Windows 7). I have just done the test. The problem is with this new Java update 40. Can yo

Re: Security Warning: Felix with Java Web Start

2013-10-11 Thread Karl Pauls
its possible that we are having problems with the latest Java 7 update. I read that they changed how they handle this stuff. Can you make a failing example available to me? regards, Karl On Fri, Oct 11, 2013 at 6:52 PM, Cesar Souza wrote: > Hi Rob > > I have already verified all jars in my ap

Re: Security Warning: Felix with Java Web Start

2013-10-11 Thread Cesar Souza
Hi Rob I have already verified all jars in my application. Are you using the Java 7 update 40 with your web start application ?? Is there a way to turn on the debug log in Felix? Maybe I can see what resource is causing the security warning. On Fri, Oct 11, 2013 at 2:26 AM, Rob Walker wrote: >

Re: Security Warning: Felix with Java Web Start

2013-10-10 Thread Rob Walker
That seems to imply at least one of the JARs or bundles being loaded isn't signed - probably worth a re-check on all JARs to make sure everything is signed. We also use a launcher, and WebStart Felix. Our production build we signs everything and we don't see that message - but in development,