[rfc][icedtea-web] https probing

helpcrypto helpcrypto helpcrypto at gmail.com
Tue Aug 26 10:29:59 UTC 2014


Ok, heres what I have done:

-get src from https://bugzilla.redhat.com/show_bug.cgi?id=1089130#c1,
patch, build and run

this is what the console says:


   at java.lang.Thread.run(Thread.java:745)
    at
net.sourceforge.jnlp.security.SecurityDialogMessageHandler.run(SecurityDialogMessageHandler.java:81)

    at
net.sourceforge.jnlp.security.SecurityDialogMessageHandler.handleMessage(SecurityDialogMessageHandler.java:102)

    at net.sourceforge.jnlp.security.SecurityDialog.
(SecurityDialog.java:129)
    at
net.sourceforge.jnlp.security.SecurityDialog.initDialog(SecurityDialog.java:255)

    at
net.sourceforge.jnlp.security.SecurityDialog.installPanel(SecurityDialog.java:307)

    at net.sourceforge.jnlp.security.dialogs.CertWarningPane.
(CertWarningPane.java:116)
    at
net.sourceforge.jnlp.security.dialogs.CertWarningPane.addComponents(CertWarningPane.java:124)

    at
net.sourceforge.jnlp.security.dialogs.CertWarningPane.addButtons(CertWarningPane.java:238)

    at net.sourceforge.jnlp.security.dialogs.TemporaryPermissionsButton.
(TemporaryPermissionsButton.java:79)
    at java.util.Objects.requireNonNull(Objects.java:201)
Exception in thread "NetxSecurityThread" java.lang.NullPointerException
plugin_in_pipe_callback return
plugin_send_message_to_appletviewer return
  PIPE: plugin wrote(?): plugin PluginProxyInfo reference 1 DIRECT
plugin_send_message_to_appletviewer
Proxy info: plugin PluginProxyInfo reference 1 DIRECT
parts[0]=plugin, parts[1]=PluginProxyInfo, reference, parts[3]=1, parts[4]=
http://domain.com:443 -- decoded_url=http://domain.com:443
SENDING URL: http://domain.com:443
GOT URL: http://domain.com:443 --
  PIPE: plugin read: plugin PluginProxyInfo reference 1
http://domain.com:443
plugin_in_pipe_callback
Waiting for applet panel
net.sourceforge.jnlp.NetxPanel[panel0,0,0,0x0,hidden,layout=java.awt.BorderLayout]
to initialize...
Waiting for applet init
Selected proxies: [DIRECT]
Proxy for socket://domain.com:443 is DIRECT
Call DONE
wait call request 3
wait call request 2
Consumption (priority=true) completed by consumer thread 2
DISPATCHCALLREQUESTS 8
DISPATCHCALLREQUESTS 7
DISPATCHCALLREQUESTS 6
PluginProxyInfoRequest GOT: plugin PluginProxyInfo reference 1 DIRECT
DISPATCHCALLREQUESTS 5
DISPATCHCALLREQUESTS 3
DISPATCHCALLREQUESTS 2
DISPATCHCALLREQUESTS 1
readPair: 'plugin' - 'PluginProxyInfo' 23
Consumer (priority=true) thread 2 consuming plugin PluginProxyInfo
reference 1 DIRECT
Found free worker (true) with id 2
Waiting for data...
  PIPE: appletviewer read: plugin PluginProxyInfo reference 1 DIRECT
wait call request 1
  PIPE: appletviewer wrote: plugin PluginProxyInfo reference 1
http://domain.com:443
Securitymanager=net.sourceforge.jnlp.runtime.JNLPSecurityManager at 1bf3f6a
Registering priority for string reference 1
Registering priority for reference 1
Selecting proxy for: socket://domain.com:443
plugin_in_pipe_callback return
plugin_send_message_to_appletviewer return
  PIPE: plugin wrote(?): plugin PluginProxyInfo reference 0 DIRECT
plugin_send_message_to_appletviewer
Proxy info: plugin PluginProxyInfo reference 0 DIRECT
parts[0]=plugin, parts[1]=PluginProxyInfo, reference, parts[3]=0, parts[4]=
https://domain.com/my.jar -- decoded_url=https://domain.com/my.jar
SENDING URL: https://domain.com/my.jar
GOT URL: https://domain.com/my.jar --
  PIPE: plugin read: plugin PluginProxyInfo reference 0
https://domain.com/my.jar
plugin_in_pipe_callback
Consumption (priority=true) completed by consumer thread 2
DISPATCHCALLREQUESTS 8
DISPATCHCALLREQUESTS 7
DISPATCHCALLREQUESTS 6
Selected proxies: [DIRECT]
Proxy for https://domain.com/my.jar is DIRECT
Call DONE
wait call request 3
PluginProxyInfoRequest GOT: plugin PluginProxyInfo reference 0 DIRECT
DISPATCHCALLREQUESTS 5
DISPATCHCALLREQUESTS 3
DISPATCHCALLREQUESTS 2
DISPATCHCALLREQUESTS 1
readPair: 'plugin' - 'PluginProxyInfo' 23
Consumer (priority=true) thread 2 consuming plugin PluginProxyInfo
reference 0 DIRECT
wait call request 2
Worker 2 (priority=true) created.
Cannot find free worker, creating priority worker 2
Waiting for data...
  PIPE: appletviewer read: plugin PluginProxyInfo reference 0 DIRECT
wait call request 1
  PIPE: appletviewer wrote: plugin PluginProxyInfo reference 0
https://domain.com/my.jar
Securitymanager=net.sourceforge.jnlp.runtime.JNLPSecurityManager at 1bf3f6a
Registering priority for string reference 0
Registering priority for reference 0
Selecting proxy for: https://domain.com/my.jar
done https://domain.com/my.jar
Probing https://domain.com/my.jar
Connecting https://domain.com/my.jar
All possible urls for location=https://domain.com/my.jar state=CONNECTING
DOWNLOAD STARTED : [https://domain.com/my.jar, https://domain.com/my.jar]
Jars not ready to provide main class
Detected online set to: true
Jars not ready to provide attribute Application-Name
New classloader: null
        result: null
          arg: net.sourceforge.jnlp.PluginBridge at c642e5
call privileged method: checkSingleInstanceRunning
Jars not ready to provide main class
Jars not ready to provide attribute Application-Name
Acquired shared lock on /tmp/user/netx/locks/netx_running to indicate
javaws is running
Waiting for applet panel
net.sourceforge.jnlp.NetxPanel[panel0,0,0,0x0,hidden,layout=java.awt.BorderLayout]
to initialize...
Jars not ready to provide main class
Jars not ready to provide attribute Application-Name
jars length: 1
Jar string: https://domain.com/my.jar
Waiting for applet panel
net.sourceforge.jnlp.NetxPanel[panel0,0,0,0x0,hidden,layout=java.awt.BorderLayout]
to initialize...
java.lang.ClassNotFoundException: java/net/URLPermission     at
java.lang.Class.forName0(Native Method)     at
java.lang.Class.forName(Class.java:190)     at
net.sourceforge.jnlp.SecurityDesc. (SecurityDesc.java:159)     at
net.sourceforge.jnlp.JNLPFile. (JNLPFile.java:137)     at
net.sourceforge.jnlp.PluginBridge. (PluginBridge.java:90)     at
net.sourceforge.jnlp.PluginBridge. (PluginBridge.java:67)     at
net.sourceforge.jnlp.NetxPanel.ourRunLoader(NetxPanel.java:101)     at
sun.applet.AppletViewerPanelAccess.run(AppletViewerPanelAccess.java:74)
    at java.lang.Thread.run(Thread.java:745)
Waiting for applet init
Exception while reflectively finding URLPermission - host is probably not
running Java 8+
JNLPRuntime already initialized
net.sourceforge.jnlp.NetxPanel[panel0,0,0,0x0,hidden,layout=java.awt.FlowLayout]
framed
Added splash
net.sourceforge.jnlp.splashscreen.impls.DefaultSplashScreen2012[,0,0,0x0,invalid,alignmentX=0.0,alignmentY=0.0,border=,flags=0,maximumSize=,minimumSize=,preferredSize=]
plugin_in_pipe_callback return
plugin_in_pipe_callback: setting status    iniciando applet...
  PIPE: plugin read: instance 1 status iniciando applet...
plugin_in_pipe_callback
Framing
net.sourceforge.jnlp.NetxPanel[panel0,0,0,0x0,invalid,layout=java.awt.FlowLayout]
X and Y are: 1 1
{name=MyApplet, code=MyApplet.Xml, id=MyApplet, width=1, mayscript=true,
archive=https://domain.com/my.jar, cache_archive=https://domain.com/my.jar,
codebase=https://domain.com, codebase_lookup=false,
permissions=all-permissions, type=application/x-java-applet,
cache_version=1.2.3.4, scriptable=true, height=1}
Using NetX panel
  PIPE: appletviewer wrote: instance 1 status iniciando applet...
done https://domain.com/page.html
Probing https://domain.com/page.html
Connecting https://domain.com/page.html
Handling message: GetJavaObject instance 1 Worker
#1/IsPriority=false/IsFree=false/Message=instance 1 reference -2
GetJavaObject
PAV handling: GetJavaObject
Breakdown -- type: instance identifier: 1 reference: -2 src: null
privileges: null rest: "GetJavaObject"
readPair: 'GetJavaObject' - 'null' 37
readPair: 'reference' - '-2' 24
readPair: 'instance' - '1' 11
Handle = 54543037 Width = 1 Height = 1 DocumentBase =
https://domain.com/page.html Params =
id;MyApplet;name;MyApplet;type;application/x-java-applet;height;100%;width;100%;codebase;
https://domain.com;archive;
https://domain.com/my.jar;code;MyApplet.Xml;MAYSCRIPT;true;scriptable;true;codebase_lookup;false;cache_archive;https://domain.com/my.jar;cache_version;1.2.3.4;permissions;all-permissions
;
Consumer (priority=false) thread 1 consuming instance 1 reference -2
GetJavaObject
PAV handling: handle 54543037 width 1 height 1 tag
https://domain.com/page.html
id;MyApplet;name;MyApplet;type;application/x-java-applet;height;100%;width;100%;codebase;
https://domain.com;archive;
https://domain.com/my.jar;code;MyApplet.Xml;MAYSCRIPT;true;scriptable;true;codebase_lookup;false;cache_archive;https://domain.com/my.jar;cache_version;1.2.3.4;permissions;all-permissions
;
Breakdown -- type: instance identifier: 1 reference: -1 src: null
privileges: null rest: "handle 54543037 width 1 height 1 tag
https://domain.com/page.html
id;MyApplet;name;MyApplet;type;application/x-java-applet;height;100%;width;100%;codebase;
https://domain.com;archive;
https://domain.com/my.jar;code;MyApplet.Xml;MAYSCRIPT;true;scriptable;true;codebase_lookup;false;cache_archive;https://domain.com/my.jar;cache_version;1.2.3.4;permissions;all-permissions
;"
readPair: 'handle' - '54543037' 27
readPair: 'instance' - '1' 11
Consumer (priority=false) thread 0 consuming instance 1 handle 54543037
width 1 height 1 tag https://domain.com/page.html
id;MyApplet;name;MyApplet;type;application/x-java-applet;height;100%;width;100%;codebase;
https://domain.com;archive;
https://domain.com/my.jar;code;MyApplet.Xml;MAYSCRIPT;true;scriptable;true;codebase_lookup;false;cache_archive;https://domain.com/my.jar;cache_version;1.2.3.4;permissions;all-permissions
;
Worker 1 (priority=false) created.
Cannot find free worker, creating worker 1
Waiting for data...
  PIPE: appletviewer read: instance 1 reference -2 GetJavaObject
Waiting for data...
Worker 0 (priority=false) created.
Cannot find free worker, creating worker 0
  PIPE: appletviewer read: instance 1 handle 54543037 width 1 height 1 tag
https://domain.com/page.html
id;MyApplet;name;MyApplet;type;application/x-java-applet;height;100%;width;100%;codebase;
https://domain.com;archive;
https://domain.com/my.jar;code;MyApplet.Xml;MAYSCRIPT;true;scriptable;true;codebase_lookup;false;cache_archive;https://domain.com/my.jar;cache_version;1.2.3.4;permissions;all-permissions
;
Waiting for data...
Read 81 entries from Firefox's preferences
Found preferences file:
/home/user/.mozilla/firefox/6y861xeu.default/prefs.js
Using firefox's profiles file: /home/user/.mozilla/firefox/profiles.ini
JRP is in plug-in thread...
0xb24f4940 unlocked...
plugin_send_message_to_appletviewer return
  PIPE: plugin wrote(?): instance 1 reference -2 GetJavaObject
plugin_send_message_to_appletviewer
Notifying subscriber 0xb240c500 of instance 1 reference -2 GetJavaObject
Message instance 1 reference -2 GetJavaObject received on bus. Notifying
subscribers.
Trying to lock 0xb24f4940...
Subscribing 0xbfb77b80 to bus 0xb24f48e0
Returning id 1 for instance 0xb24c3808
JavaRequestProcessor constructor
ITNP_GetValue
ITNP_SetWindow return
ITNP_SetWindow: window already exists.
ITNP_SetWindow
ITNP_SetWindow return
plugin_send_initialization_message return
  PIPE: plugin wrote(?): instance 1 handle 54543037 width 1 height 1 tag
https://domain.com/page.html
id;MyApplet;name;MyApplet;type;application/x-java-applet;height;100%;width;100%;codebase;
https://domain.com;archive;
https://domain.com/my.jar;code;MyApplet.Xml;MAYSCRIPT;true;scriptable;true;codebase_lookup;false;cache_archive;https://domain.com/forja/eadmin/MyApplet/lib/xmlplugindebug
-1912272173 [unknown user][ITW-C-PLUGIN][MESSAGE_DEBUG][mar ago 26 11:01:53
CEST
2014][/home/user/Desktop/icedtea-web-b4363c984e1b/plugin/icedteanp/IcedTeaNPPlugin.cc:1689]
ITNPP Thread# -1301829440, gthread 0xb2414ca0:
plugin_send_message_to_appletviewer return
plugin_send_message_to_appletviewer
plugin_send_initialization_message
ITNP_SetWindow: setting window.
ITNP_SetWindow
ITNP_GetValue return
ITNP_GetValue: returning TRUE for NeedsXEmbed.
ITNP_GetValue
ITNP_GetValue return
ITNP_GetValue: returning TRUE for NeedsXEmbed.
ITNP_GetValue
ITNP_New return
Mapping id 1 and instance 0xb24c3808
plugin_get_documentbase returning: https://domain.com/page.html
plugin_get_documentbase return
plugin_get_documentbase
plugin_parameters_string return
plugin_parameters_string
plugin_get_documentbase returning: https://domain.com/page.html
plugin_get_documentbase return
plugin_get_documentbase
plugin_debug_to_console: true, pipe
/run/user/1000/icedteaplugin-user-ZCicv3/20191-icedteanp-plugin-debug-to-appletviewer
plugin_debug_to_system: true
plugin_debug_to_streams: true
plugin_debug_to_file: false
plugin_debug_headers: false
plugin_debug: true, initialised
Queue processor initialized. Queue = 0xb071e180
Queue processor initialized. Queue = 0xb071e180
plugin_start_appletviewer return
Initialized VM with pid=20200
Queue processor initialized. Queue = 0xb071e180
plugin_start_appletviewer
ITNP_New: created debug fifo:
/run/user/1000/icedteaplugin-user-ZCicv3/20191-icedteanp-plugin-debug-to-appletviewer
ITNP_New: creating debug fifo:
/run/user/1000/icedteaplugin-user-ZCicv3/20191-icedteanp-plugin-debug-to-appletviewer
ITNP_New: created output fifo:
/run/user/1000/icedteaplugin-user-ZCicv3/20191-icedteanp-plugin-to-appletviewer
ITNP_New: creating output fifo:
/run/user/1000/icedteaplugin-user-ZCicv3/20191-icedteanp-plugin-to-appletviewer
ITNP_New: created input fifo:
/run/user/1000/icedteaplugin-user-ZCicv3/20191-icedteanp-appletviewer-to-plugin
ITNP_New: creating input fifo:
/run/user/1000/icedteaplugin-user-ZCicv3/20191-icedteanp-appletviewer-to-plugin
No JVM is running. Attempting to start one...
Checking JVM status...
plugin_data_new return
plugin_data_new
Got variant 0xbfb78948
ITNP_New
NP_Initialize return
Subscribing 0xb240c500 to bus 0xb24f4940
Subscribing 0xb07280f0 to bus 0xb24f48e0
Mutexes 0xb24f4958 and 0xb24f4940 initialized
Mutexes 0xb24f48f8 and 0xb24f48e0 initialized
NP_Initialize: using /usr/lib/jvm/java-7-openjdk-i386//jre/bin/java
plugin_test_appletviewer return
plugin_test_appletviewer: /usr/lib/jvm/java-7-openjdk-i386//jre/bin/java
Executing java at /usr/lib/jvm/java-7-openjdk-i386//jre/bin/java
NP_Initialize
NP_GetValue return
NP_GetValue: returning plugin description.
NP_GetValue
NP_GetValue return
NP_GetValue: returning plugin name.
NP_GetValue
NP_GetMIMEDescription return
NP_GetMIMEDescription
plugin_debug_to_console: true, pipe not yet known or broken
plugin_debug_to_system: true
plugin_debug_to_streams: true
plugin_debug_to_file: false
plugin_debug_headers: false
plugin_debug: true, initialised
Starting security dialog thread
Streams initialized
Creating consumer...
Current context CL=sun.misc.Launcher$AppClassLoader at 1d7bd04
Started processing of plugin-debug-to-console
/run/user/1000/icedteaplugin-user-ZCicv3/20191-icedteanp-plugin-debug-to-appletviewer
Starting processing of plugin-debug-to-console
/run/user/1000/icedteaplugin-user-ZCicv3/20191-icedteanp-plugin-debug-to-appletviewer
WARNING: key deployment.system.cachedir has no value, skipping
WARNING: key deployment.system.cachedir has no value, setting to default
value
Loading User level properties from:
/home/user/.config/icedtea-web/deployment.properties
cache: /home/user/.cache/icedtea-web file exists:true
config: /home/user/.config/icedtea-web file exists: true
System is already following XDG .cache and .config specifications
2:
/run/user/1000/icedteaplugin-user-ZCicv3/20191-icedteanp-plugin-debug-to-appletviewer
1:
/run/user/1000/icedteaplugin-user-ZCicv3/20191-icedteanp-appletviewer-to-plugin
0:
/run/user/1000/icedteaplugin-user-ZCicv3/20191-icedteanp-plugin-to-appletviewer
startup arguments:


This normally works.
Is this what you are looking for?




On Tue, Aug 26, 2014 at 11:27 AM, helpcrypto helpcrypto <
helpcrypto at gmail.com> wrote:

> On Tue, Aug 26, 2014 at 10:27 AM, Jacob Wisor <gitne at gmx.de> wrote:
>
>> On 08/26/2014 09:28 AM, helpcrypto helpcrypto wrote:
>>
>>> I have some legacy servers here at work, which are having trouble with
>>> Oracle
>>> Java 8 (with TLS1.1/2.0 enabled by default).
>>>
>>
>> Are those servers publicly accessible? If so I could use them for testing
>> too, well at least after Jiri has applied basic fixes to his patch.
>>
> You know, it is quite difficult to find insecure SSL 2.0 servers to setup
>> today, mostly because they have been replaced by secure servers.
>>
> Some of them are. Dont know if those are affected.
>  I'll let you know.
>
>
>> Anyhow, even if those servers are on the internet only you really should
>> update them to support SSL 3.0 or later. ;-)
>>
>>
>>  Is there any chance this issue is somewhat related to this? (i havent
>>> tested
>>> this on Icedtea)
>>>
>>> Will it help you if I test something? (Perhaps I'm able to reproduce
>>> something)
>>>
>>
>> Oh certainly, the more testers the better! ;-) So, testers are always
>> welcome.
>>
>> Jacob
>>
>  Going to try https://bugzilla.redhat.com/show_bug.cgi?id=1089130#c16
> with our applet.
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.openjdk.java.net/pipermail/distro-pkg-dev/attachments/20140826/0a198bff/attachment-0001.html>


More information about the distro-pkg-dev mailing list