<html>
    <head>
      <base href="http://icedtea.classpath.org/bugzilla/" />
    </head>
    <body><table border="1" cellspacing="0" cellpadding="8">
        <tr>
          <th>Priority</th>
          <td>P3
          </td>
        </tr>

        <tr>
          <th>Bug ID</th>
          <td><a class="bz_bug_link 
          bz_status_NEW "
   title="NEW --- - Signed main jar brought in through an external jnlp file (extension) is considered unsigned"
   href="http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=1040">1040</a>
          </td>
        </tr>

        <tr>
          <th>CC</th>
          <td>unassigned&#64;icedtea.classpath.org
          </td>
        </tr>

        <tr>
          <th>Assignee</th>
          <td>dbhole&#64;redhat.com
          </td>
        </tr>

        <tr>
          <th>Summary</th>
          <td>Signed main jar brought in through an external jnlp file (extension) is considered unsigned
          </td>
        </tr>

        <tr>
          <th>Severity</th>
          <td>normal
          </td>
        </tr>

        <tr>
          <th>Classification</th>
          <td>Unclassified
          </td>
        </tr>

        <tr>
          <th>OS</th>
          <td>Linux
          </td>
        </tr>

        <tr>
          <th>Reporter</th>
          <td>smohammad&#64;redhat.com
          </td>
        </tr>

        <tr>
          <th>Hardware</th>
          <td>x86_64
          </td>
        </tr>

        <tr>
          <th>Status</th>
          <td>NEW
          </td>
        </tr>

        <tr>
          <th>Version</th>
          <td>unspecified
          </td>
        </tr>

        <tr>
          <th>Component</th>
          <td>Plugin
          </td>
        </tr>

        <tr>
          <th>Product</th>
          <td>IcedTea-Web
          </td>
        </tr></table>
      <p>
        <div>
        <pre>Created <span class=""><a href="attachment.cgi?id=704" name="attach_704" title="Reproducer">attachment 704</a> <a href="attachment.cgi?id=704&amp;action=edit" title="Reproducer">[details]</a></span>
Reproducer

If the launching jnlp file does not have any jars as its resources but uses a
signed jar from an external jnlp file (using extension), the jar is considered
unsigned.

In the example attached the launching jnlp file requests all permissions for
the (signed) main jar brought in through an external jnlp file. The following
message is shown when launched:

netx: Initialization Error: Could not initialize application. (Fatal:
Application Error: Cannot grant permissions to unsigned jars. Application
requested security permissions, but jars are not signed.)
net.sourceforge.jnlp.LaunchException: Fatal: Initialization Error: Could not
initialize application. 
    at net.sourceforge.jnlp.Launcher.createApplication(Launcher.java:778)
    at net.sourceforge.jnlp.Launcher.launchApplication(Launcher.java:552)
    at net.sourceforge.jnlp.Launcher$TgThread.run(Launcher.java:889)
Caused by: net.sourceforge.jnlp.LaunchException: Fatal: Application Error:
Cannot grant permissions to unsigned jars. Application requested security
permissions, but jars are not signed.
    at
net.sourceforge.jnlp.runtime.JNLPClassLoader.setSecurity(JNLPClassLoader.java:286)
    at
net.sourceforge.jnlp.runtime.JNLPClassLoader.&lt;init&gt;(JNLPClassLoader.java:206)
    at
net.sourceforge.jnlp.runtime.JNLPClassLoader.getInstance(JNLPClassLoader.java:320)
    at net.sourceforge.jnlp.Launcher.createApplication(Launcher.java:770)
    ... 2 more</pre>
        </div>
      </p>
      <hr>
      <span>You are receiving this mail because:</span>
      
      <ul>
          <li>You are on the CC list for the bug.</li>
      </ul>
    </body>
</html>