[Bug 3350] Java applet launched via jnlp web-start cannot load. Fails with "Could not initialize applet"

Wed Apr 5 13:18:02 UTC 2017

http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=3350

--- Comment #6 from stefan at kemtrak.com ---
Hi, see below

(In reply to JiriVanek from comment #4)
> > ITW version 1.6.2-3ubuntu1
> 
> Indeed the latest released. I'm wondering about head.
> > > 
> > > > spec "7.0+" without codebase attribute (Document base).
> > > > Earliest allowed version in the jnlp file is 1.7.0.45 and security
> > > 
> > > That is something better to not to use, but should work fine.
> ...
> > > 
> > > In this case jnlp file may be enough.
> > 
> > I have attached the jnlp file. This is an applet started now by Web Start in
> > order to work around the fact that the latest browser no longer allow java
> > plugins. This code is on the server of different instruments. The user
> > connects to the instrument by typing its IP address in a browser and can
> > through the code interact with the instrument. That is why the jnlp file has
> > no codebase (according to jnlp spec 7.0+) - the codebase is the document
> > base which is different on every instrument.
> 
> Hmm..not much more clever from this but ok :)

Was the jnlp file any help?

> > 
> > > 
> > > > However with IcedTea webstart I get
> > > > 
> > > ..
> > > 
> > > > java.lang.NullPointerException     at
> > > > net.sourceforge.jnlp.security.SecurityDialogs.showMatchingALACAttributePanel(SecurityDialogs.java:405)
> > > 
> > > 
> > > This looks like error in ALACA (application allowable  codebase). This may
> > > happen when some mandatory field is missing in jnlp/manifest.  I believe all
> > > coarsenesses were fixed in alaca dialogue, so the NPE should not happen -
> > > tahts why I'm asking for exact version.
> > > The oracle javaws is a bit more benevolent to jnlp specification then ITW
> > > is, but thats not an apologise for ITW.
> > > 
> > > You should be able to workaround this by disabling security manifest checks: 
> > > 
> > > cat ~/.config/icedtea-web/deployment.properties
> > > #Netx deployment configuration
> > > #Wed Apr 05 12:51:00 CEST 2017
> > > deployment.manifest.attributes.check=NONE
> > > 
> > > Maybe add also:
> > > deployment.security.level=ALLOW_UNSIGNED
> > > 
> > >
> > Thanks for the tip. If I understand correctly these are itweb-settings on
> 
> yes
> > the client. For this code, different users/computers need to be able to
> > connect to the instruments/code remotely so every user would need to change
> 
> indeed.
> 
> > their settings for the tip to work. Which could be indeed the fix if nothing
> > else is possible. It would however be my last resort. Ideally it should run
> > on the default settings if possible, so that it would be (in a sense)
> > plug-and-play for the user.
> 
> Still, may you please verify it helped?

OK, I have created the file deployment.properties in ~/.config/icedtea-web/
with the following content.

#Netx deployment configuration
#Wed Apr 05 12:51:00 CEST 2017
deployment.manifest.attributes.check=NONE

I got exactly the same error as before. But

Then I tried adding
deployment.security.level=ALLOW_UNSIGNED on a second try.

That made the main class load for the first time! But it didn't load the rest
of the classes contained in the jar files and it was left hanging at what I
have as boot screen.

[ITW-JAVAWS][ERROR_DEBUG][Wed Apr 05 14:57:25 CEST
2017][net.sourceforge.jnlp.Parser.getParserInstance(Parser.java:1351)] NETX
Thread# 5fd0d5ae, name main: java.lang.ClassNotFoundException:
net/sourceforge/jnlp/MalformedXMLParser

[ITW-JAVAWS][ERROR_DEBUG][Wed Apr 05 14:57:25 CEST
2017][net.sourceforge.jnlp.JNLPFile$ManifestsAttributes.getAttribute(JNLPFile.java:1076)]
NETX Thread# 5fd0d5ae, name main: Jars not ready to provide attribute
Application-Name

[ITW-JAVAWS][ERROR_DEBUG][Wed Apr 05 14:57:23 CEST
2017][net.sourceforge.jnlp.browser.BrowserAwareProxySelector.getFromBrowser(BrowserAwareProxySelector.java:218)]
NETX Thread# 107e976e, name itwpool-1-itwthread-1: Browser proxy option "4"
(Automatic) not supported yet.
[ITW-JAVAWS][ERROR_DEBUG][Wed Apr 05 14:57:23 CEST
2017][net.sourceforge.jnlp.browser.BrowserAwareProxySelector.getFromBrowser(BrowserAwareProxySelector.java:218)]
NETX Thread# 107e976e, name itwpool-1-itwthread-1: Browser proxy option "4"
(Automatic) not supported yet.
[ITW-JAVAWS][ERROR_DEBUG][Wed Apr 05 14:57:23 CEST
2017][net.sourceforge.jnlp.cache.ResourceDownloader.findBestUrl(ResourceDownloader.java:254)]
NETX Thread# 107e976e, name itwpool-1-itwthread-1: All possible urls for
location=http://192.168.10.201/Kemtrak.jnlp state=PRECONNECT CONNECTING
PREDOWNLOAD PROCESSING : [http://192.168.10.201/Kemtrak.jnlp,
http://192.168.10.201/Kemtrak.jnlp]
[ITW-JAVAWS][ERROR_DEBUG][Wed Apr 05 14:57:23 CEST
2017][net.sourceforge.jnlp.cache.ResourceDownloader.findBestUrl(ResourceDownloader.java:253)]
NETX Thread# 107e976e, name itwpool-1-itwthread-1: Finding best URL for:
http://192.168.10.201/Kemtrak.jnlp : DownloadOptions[use pack: false; use
version: false]
[ITW-JAVAWS][ERROR_DEBUG][Wed Apr 05 14:57:23 CEST
2017][net.sourceforge.jnlp.services.ServiceUtil$PrivilegedHandler.invoke(ServiceUtil.java:195)]
NETX Thread# 5fd0d5ae, name main:        result: null
[ITW-JAVAWS][ERROR_DEBUG][Wed Apr 05 14:57:23 CEST
2017][net.sourceforge.jnlp.services.ServiceUtil$PrivilegedHandler.invoke(ServiceUtil.java:177)]
NETX Thread# 5fd0d5ae, name main: call privileged method: getCodeBase

By the way both .jar files are signed.

[ITW-JAVAWS][MESSAGE_DEBUG][Wed Apr 05 14:57:32 CEST
2017][net.sourceforge.jnlp.tools.JarCertVerifier.getAlreadyTrustPublisher(JarCertVerifier.java:121)]
NETX Thread# 4bb62a0b, name Kemtrak 007: App already has trusted publisher:
true
[ITW-JAVAWS][MESSAGE_DEBUG][Wed Apr 05 14:57:32 CEST
2017][net.sourceforge.jnlp.tools.JarCertVerifier.isFullySigned(JarCertVerifier.java:186)]
NETX Thread# 4bb62a0b, name Kemtrak 007: App already has trusted publisher:
true

The manifest in the main jar file reads
Manifest-Version: 1.0
Created-By: 1.6.0 (Sun Microsystems Inc.)
Permissions: all-permissions
Trusted-Only: true
Application-Name: Kemtrak
Main-Class: Kemtrak
Class-path: jcalendar.jar
Codebase: *
Application-Library-Allowable-Codebase: *

> > 
> > > 
> > > see:
> > >  ~/icedtea-web-image/bin/itweb-settings --verbose --help |  grep manifest
> > > 
> > > maybe it will be enough to set to al but ALAC
> > > 
> > > Anyway this is not solution for your customers, so, help me to help you.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.openjdk.java.net/pipermail/distro-pkg-dev/attachments/20170405/d9000ce5/attachment.html>