Hi regarding download always in using icedtea-web

[Jiri Vanek]

On 11/15/18 9:27 AM, Jiri Vanek wrote:
> On 11/15/18 12:21 AM, jtesdall wrote:
>> OK, putting the deployment.properties file in the
>> %LOCALAPPDATA%\ojdkbuild\java-1.8.0-openjdk-[version]\webstart\.config\icedtea-web
>> directory worked.
>>
>> So now I have a fixed re-download on Windows and can set
>> deployment.https.noenforce=true. Great for my local testing.
>>
>> But now my delemma is how to get this to hundreds of users? How can I set
>> deployment.https.noenforce without doing something manual? I need to create
>> an install with openJDK and this version of Webstart(ITW) that works as
>> closely to Oracles version without manually manipluating it. Any ideas? Do I
>> need to change the source? How can I get the source with the fixed
>> re-download in windows issue resolved??
> 
> ITW is capable of locating system wide properties. It is also capable of system-wide pointer to
> properties - file, which is just pointing to the file on network, which keeps the properties.
> 
> However, I had never heard of usage of this. So the implementation may be rotten (no test exists
> now). In addition, I dont know how this is handled in Windows, as paths are what separete those
> worlds most.
> 
> See: http://icedtea.wildebeest.org/download/icedtea-web-docs/1.7/html/en/javaws.html "
> 
> $XDG_CONFIG_HOME/icedtea-web/deployment.properties - Users main deployment properties file.
> $JAVA_HOME/lib/deployment.config - java-global deployment properties file. May be affected by
> deployment.jre.dir.
> /etc/.java/deployment/deployment.config - Global deployment config file.
> 
> Sothose files... can make troubles on windows.
> 
> Re reading *how* those files are handled, I would rather point you to code then to rephrase:
> from
> http://icedtea.classpath.org/hg/icedtea-web/file/996849aa03d1/netx/net/sourceforge/jnlp/config/DeploymentConfiguration.java#l506
> over
> http://icedtea.classpath.org/hg/icedtea-web/file/996849aa03d1/netx/net/sourceforge/jnlp/config/DeploymentConfiguration.java#l541
> down to
> http://icedtea.classpath.org/hg/icedtea-web/file/996849aa03d1/netx/net/sourceforge/jnlp/config/DeploymentConfiguration.java#l589
> 
> 
> If you find it not working, I will not be surprised, and will be happy to test it on linux and patch
> it for you. Howver I'm unable to verify windows-specific tests. And that will be pain point here.
> 
> Adding also Alex to CC, as he may be initerested in helping with this part on Windows, and also can
> have knowledge about Windows system-wide config files, as:
> http://icedtea.classpath.org/hg/icedtea-web/file/996849aa03d1/netx/net/sourceforge/jnlp/config/PathsAndFiles.java#l366
> is obviously wrong on windows.

Two bugs in this impla lready spotted:
 - deployment.system.config is not globally known and thus not documented
 - only file protocol is implemented.
   - I'm wondering if allowing http can be a security risk or no. Looks like useless

I think there are answers for both:
https://docs.oracle.com/javase/7/docs/technotes/guides/jweb/jcp/properties.html
> 
> Thanx!
>   J.
> 
>>
>>
>>
>> --
>> Sent from: http://openjdk.5641.n7.nabble.com/OpenJDK-Distribution-specific-Packaging-f25548.html
>>
> 
> 


-- 
Jiri Vanek
Senior QE engineer, OpenJDK QE lead, Mgr.
Red Hat Czech
jvanek at redhat.com    M: +420775390109