Hi,
While we test our WebStart app with Java 9 we noticed that a SecurityException
is silently logged to the Java Webstart Console:
Exception in thread "Thread-13" java.lang.SecurityException:
Sicherheitspaket-JAR-Datei kann nicht geprüft werden
at
jdk.deploy@9-ea/com.sun.deploy.util.SecurityBaseline.verifyJar(Unknown Source)
at
jdk.deploy@9-ea/com.sun.deploy.util.SecurityBaseline.access$200(Unknown Source)
at jdk.deploy@9-ea/com.sun.deploy.util.SecurityBaseline$1.run(Unknown
Source)
at java.base/java.lang.Thread.run(Unknown Source)
The app continues to work, we have not found any side effects yet.
One conspicuous thing is that this is just logged after we call:
java.util.logging.LogManager.getLogManager().readConfiguration();
I have not found any related open issue on https://bugs.openjdk.java.net
All our JARs are signed and JNLP also request all-permissions.
Tested with Java 9 b157 and Windows 7.
The exception is not logged with Java 8 u121.
Should we fill a report on bugreport.java.com for this ?
Btw SecurityBaseline starts multiple threads, it would be great to give this
threads a descriptive name.
Thanks
Reto
