[Bug 765] New: Lazy jars do not have a signature check

bugzilla-daemon at icedtea.classpath.org bugzilla-daemon at icedtea.classpath.org
Tue Jul 26 07:04:24 PDT 2011


http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=765

           Summary: Lazy jars do not have a signature check
           Product: IcedTea-Web
           Version: hg
          Platform: all
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P5
         Component: NetX
        AssignedTo: smohammad at redhat.com
        ReportedBy: smohammad at redhat.com
                CC: unassigned at icedtea.classpath.org


In the launching JNLP file, IcedTea-Web treats all resources with
download="lazy" (within the jar element) as unsigned jars, even if a valid
signature exist. If the signature is invalid, it still runs the application but
as an unsigned application.


-- 
Configure bugmail: http://icedtea.classpath.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.



More information about the distro-pkg-dev mailing list