[Bug 3660] New: Exception throw when trying to initialize com.sun.crypto.provider.DHKeyPairGenerator

[bugzilla-daemon at icedtea.classpath.org]

https://icedtea.classpath.org/bugzilla/show_bug.cgi?id=3660

            Bug ID: 3660
           Summary: Exception throw when trying to initialize
                    com.sun.crypto.provider.DHKeyPairGenerator
           Product: IcedTea-Web
           Version: 1.7
          Hardware: 64-bit
                OS: Windows
            Status: NEW
          Severity: critical
          Priority: P5
         Component: NetX (javaws)
          Assignee: jvanek at redhat.com
          Reporter: cdecker at currenex.com
                CC: unassigned at icedtea.classpath.org

Created attachment 1713
  --> https://icedtea.classpath.org/bugzilla/attachment.cgi?id=1713&action=edit
Side by side, signed jar, source code, jnlp to local launch

When an application is launched used IcedTeaWeb and the following line is
called:

DHKeyPairGenerator gen = new DHKeyPairGenerator();

The following trace occurs in the IcedTeaWeb JNLP Class loader.

- Jar is self signed
- JNLP is launching locally (codebase = file:// YOUR_DOWNLOAD_PATH), but this
isn't an issue, this is to just demo the issue.

Error: No security instance for
file:/C:/Program%20Files/Java/jdk1.8.0_191/jre/lib/ext/sunjce_provider.jar. The
application may have trouble continuing
Error: No security instance for
file:/C:/Program%20Files/Java/jdk1.8.0_191/jre/lib/ext/sunjce_provider.jar. The
application may have trouble continuing
java.lang.NullPointerException: Code source security was null
        at
net.sourceforge.jnlp.runtime.JNLPClassLoader.getPermissions(JNLPClass
Loader.java:1156)
        at
net.sourceforge.jnlp.runtime.JNLPPolicy.getPermissions(JNLPPolicy.jav
a:88)
        at net.sourceforge.jnlp.runtime.JNLPPolicy.implies(JNLPPolicy.java:199)
        at java.security.ProtectionDomain.implies(ProtectionDomain.java:279)
        at
java.security.AccessControlContext.checkPermission(AccessControlConte
xt.java:450)
        at
java.security.AccessController.checkPermission(AccessController.java:
884)
        at java.lang.SecurityManager.checkPermission(SecurityManager.java:549)
        at
net.sourceforge.jnlp.runtime.JNLPSecurityManager.checkPermission(JNLP
SecurityManager.java:291)
        at
java.lang.SecurityManager.checkPackageAccess(SecurityManager.java:156
4)
        at java.lang.ClassLoader$1.run(ClassLoader.java:502)
        at java.lang.ClassLoader$1.run(ClassLoader.java:500)
        at java.security.AccessController.doPrivileged(Native Method)
        at java.lang.ClassLoader.checkPackageAccess(ClassLoader.java:500)
        at
com.sun.crypto.provider.DHKeyPairGenerator.<init>(DHKeyPairGenerator.
java:71)
        at
webstart.SelfSignedWebstartApp.generateDHKeyPair(SelfSignedWebstartAp
p.java:41)
        at
webstart.SelfSignedWebstartApp.access$100(SelfSignedWebstartApp.java:

-- 
You are receiving this mail because:
You are on the CC list for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.openjdk.java.net/pipermail/distro-pkg-dev/attachments/20181204/a08873c5/attachment.html>