[RFC][icedtea-web]: Added support for signed JNLP file

Saad Mohammad smohammad at redhat.com
Thu Jun 23 13:47:59 PDT 2011

I have attached my patch that adds support for signed JNLP files to 
IcedTea-Web. There are two ways of signing a JNLP file;
You can do it either way by having the following files in a signed jar:

It will fail to launch an application if the signed JNLP file does not 
match the launching JNLP file.


2011-06-23  Saad Mohammad <smohammad at redhat.com>

     * netx/net/sourceforge/jnlp/JNLPVerify.java:
       Created this class to compares signed JNLP file with the 
launching JNLP file.
       It is able to compare both method of signing of a JNLP file: 
     * netx/net/sourceforge/jnlp/runtime/JNLPClassLoader.java:
       Added a custom exception: JNLPVerifyException. Also added 
JNLPVerifyException to methods
       that throws the custom exception.
       (initializeResources): Checks if there is any signed JNLP file 
within the signed jars.
        If signed JNLP file fails to match or fails to be verified, the 
application throws
       a JNLPVerifyException.
     * netx/net/sourceforge/jnlp/Node.java:
       Created a method that retrieves the attribute names of the Node in a
       private string [] member. The method returns the attribute names.
     * netx/net/sourceforge/nanoxml/XMLElement.java:
       (sanitizeInput): Changed parameter type of isr from 
InputStreamReader to Reader.

Saad Mohammad

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.openjdk.java.net/pipermail/distro-pkg-dev/attachments/20110623/3b48a85f/attachment.html 
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: 06-23-357
Url: http://mail.openjdk.java.net/pipermail/distro-pkg-dev/attachments/20110623/3b48a85f/06-23-357.ksh 

More information about the distro-pkg-dev mailing list