Web-start exception JNLP

Question

So I'm a bit confused on how to sign a jar in order for it to run as a jnlp.

At present I have a jar, it runs, starts to download and verify stuff, then it gets to the end and a window pops up saying it's unable to launch, then it gives the exception:

JNLPException[category: Launch File Error : Exception: null : LaunchDesc: 
 <jnlp codebase="http:/SomeHost:8080/_test/" href="jnlpcomponent1.jnlp" spec="1.0+">
<information>
  <title>jnlpcomponent1</title>
 <vendor>SUN_MICR</vendor>
 </information>
 <security>
 <all-permissions/>
  </security>
<resources>
 <jar href="lib/activation.jar" download="eager"/>
<jar href="lib/mail.jar" download="eager"/>
 </resources>
 <component-desc/>
 </jnlp> 
]
at com.sun.javaws.security.JNLPSignedResourcesHelper.checkSignedResourcesHelper(Unknown Source)
at com.sun.javaws.security.JNLPSignedResourcesHelper.checkSignedResources(Unknown Source)
at com.sun.javaws.Launcher.prepareResources(Unknown Source)
at com.sun.javaws.Launcher.prepareAllResources(Unknown Source)
at com.sun.javaws.Launcher.prepareToLaunch(Unknown Source)
at com.sun.javaws.Launcher.prepareToLaunch(Unknown Source)
at com.sun.javaws.Launcher.launch(Unknown Source)
at com.sun.javaws.Main.launchApp(Unknown Source)
at com.sun.javaws.Main.continueInSecureThread(Unknown Source)
at com.sun.javaws.Main$1.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)

I am fairly sure this has something to do with the jar being signed wrong / poorly... I could use some help in understanding what's going on here and how to fix it though.

Thanks a lot.

How are you signing the jar? Like, what is the command and the resultant output? — , Sep 12 '12 at 16:11
That's the thing, I'm, not signing them at all, this is with just a normal clean + build of the JNLP from netbeans. What is the proper method for signing a jnlp? — A_Elric, Sep 12 '12 at 16:43
use jarsigner. Look here: http://java.sun.com/developer/Books/javaprogramming/JAR/sign/signing.html You will need a keystore, which you can just make yourself if you wish. — , Sep 12 '12 at 16:46
Is there a recommended way to share my keystore with a team so we can all sign as the same entity? — A_Elric, Sep 12 '12 at 16:49
Try searching the bug DB/ raising a bug. But be sure to check the JNLP using [JaNeLA](http://pscode.org/janela/) first. — Andrew Thompson, Sep 12 '12 at 22:34

score 1 · Accepted Answer · answered Sep 12 '12 at 16:09

1

I am fairly sure this has something to do with the jar being signed wrong / poorly

Exactly that happent, one of your jars isn't signed (properly)

What is always working for me: unzip all jars than sign with 1 process. If is confirmed as it working, than I will remove 1-2 jar to match the original deployment design. And you will know in what jar is the problem, than easier to fix it.

answered Sep 12 '12 at 16:09

1

Quoted from above: "That's the thing, I'm, not signing them at all, this is with just a normal clean + build of the JNLP from netbeans. What is the proper method for signing a jnlp? " – A_Elric Sep 12 '12 at 16:44
@Damien.Bell http://stackoverflow.com/questions/430755/jar-resources-in-jnlp-are-not-signed-by-the-same-certificate – Sep 12 '12 at 16:57

Thorn · Answer 2 · 2012-09-21T20:27:48.800

You can use ANT to sign the JAR file. This way you can sign your files from within your IDE and it makes for a faster work-flow for when you deploy your appplication. Every change requires that you re-sign your application.

<project name="YourProject" default="dist" basedir="jarsigning">

  <target name="signMainJar">
     <signjar jar="../dist/YourApp.jar" destDir="signed" alias="WhateverYouSetIt2" 
              keystore="fileNameOfCerticate" storepass="passw03d" lazy="true" /> 
     <echo message="The file was signed." /> 
  </target>
  <!-- Use this if you are using any libraries. These also need to be signed. -->
  <target name="signLibs">
    <signjar destDir="signed" alias="WhateverYouSetIt2"
              keystore="fileNameOfCerticate" storepass="passw03d" force="true">
       <path>
          <fileset dir="lib" includes="*.jar" /> 
       </path>
    </signjar>
    <echo message="The library files were signed." /> 
  </target>

 </project>

Before you can run this script, you need to first create a jarsigning directory and place a certificate (key) to be used for signing. Inside that folder, create a folder called "signed" and this is where your signed code will be placed by the script. Use the keystore tool to create a self-signed certificate if you have not purchased one from a granting authority like Verisign or GoDaddy.

Web-start exception JNLP

2 Answers2