JOGL broken by Java version 6u31 for everybody!

classic Classic list List threaded Threaded
6 messages Options
Reply | Threaded
Open this post in threaded view
|

JOGL broken by Java version 6u31 for everybody!

FishNBrewDude
The problem is caused by Oracle modifying certificates and the certificates that the JOGL jars were signed with are no longer valid which causes a fatal error in any JOGL application that cannot be rectified.

I have verified this with the World Wind example applet and application template on the World Wind demo page.

This will potentially impact all DoD instances of World Wind and any other JOGL-based application during the next couple of days as the networks are updated as directed by Information Assurance (IA). Sun has designated Java version 6u31 as a critical security release.

NASA is looking into the problem, but I wanted to make sure that the JOGL community was aware.

Right now the only work around that we know of is to revert to 6u30.

  Thanks,
  FishNBrewDude
Reply | Threaded
Open this post in threaded view
|

Re: JOGL broken by Java version 6u31 for everybody!

Sven Gothel
Administrator
On 03/01/2012 07:04 PM, FishNBrewDude [via jogamp] wrote:
>
>
> The problem is caused by Oracle modifying certificates and the certificates
> that the JOGL jars were signed with are no longer valid which causes a fatal
> error in any JOGL application that cannot be rectified.
>
> I have verified this with the World Wind example applet and application
> template on the World Wind demo page.

You are probably referring to GlueGen and JOGL Version 1.* hosted
on the Oracle website ?

I just have tried JRE 1.6.0_31 from Oracle (Linux x64) with cleaned
caches (JARs, JNLPs and the signatures):
  <http://jogamp.org/deployment/jogamp-next/jogl-test-applets.html>

It works .. as usual.

We don't support GlueGen or JOGL Version 1.*, but the current
version 2 release 'train'.

>
> This will potentially impact all DoD instances of World Wind and any other
> JOGL-based application during the next couple of days as the networks are
> updated as directed by Information Assurance (IA). Sun has designated Java
> version 6u31 as a critical security release.
>
> NASA is looking into the problem, but I wanted to make sure that the JOGL
> community was aware.
>

In case this is related to our JOGL signed JARs,
how can we reproduce this problem ?

Kind regards, Sven

> Right now the only work around that we know of is to revert to 6u30.
>
>   Thanks,
>   FishNBrewDude


signature.asc (910 bytes) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: JOGL broken by Java version 6u31 for everybody!

FishNBrewDude
In reply to this post by FishNBrewDude
Resigning the JOGL and GLUEGEN jars apprears to correct the problem.
Reply | Threaded
Open this post in threaded view
|

Re: JOGL broken by Java version 6u31 for everybody!

FishNBrewDude
Reproduce the problem by updateing to Java 6u31 and running the World Wind demos.
Reply | Threaded
Open this post in threaded view
|

Re: JOGL broken by Java version 6u31 for everybody!

FishNBrewDude
I forgot to add the World Wind uses JOGL 1.1
Reply | Threaded
Open this post in threaded view
|

Re: JOGL broken by Java version 6u31 for everybody!

gouessej
Administrator
This is an old problem and NASA World Wind should switch to JOGL 2.0 as I said some months ago:
http://www.java-gaming.org/topics/n-b-quot-old-quot-jogl-1-1-1-jars-are-unsigned-since-september-17th-2011/24806/msg/210832/view.html#msg210832

Why persevering in using an obsolete version of JOGL? If you really need some help for a port, you can ask some questions here. We are not responsible of JOGL 1. Do you realize that this version might not work on Windows 8?

Sorry to contradict you but JOGL 2.0 is not broken and works fine with Java 1.6 update 31. JOGL 1 maintenance has been stopped some years ago.

Anyway, Sven's suggestion should work.
Julien Gouesse | Personal blog | Website