jogamp › jogl

SecurityException - no certificate for libgluegen-rt.so

classic Classic list List threaded Threaded
♦
♦
 9 messages Options
vijaygandhi
Reply | Threaded
Open this post in threaded view
♦
♦
|

SecurityException - no certificate for libgluegen-rt.so

vijaygandhi
Hi,

I am trying to use JOGL and I get the following error when trying to run on Ubuntu, 64-bit, Sun Java 1.6.31. I am using the jars downloaded from http://jogamp.org/deployment/jogamp-current/jar/. Has anyone seen this error before?

Caused by: java.lang.SecurityException: no certificate for libgluegen-rt.so in gluegen-rt-natives-linux-amd64.jar
        at com.jogamp.common.util.JarUtil.validateCertificate(JarUtil.java:510)
        at com.jogamp.common.util.JarUtil.validateCertificates(JarUtil.java:484)
        at com.jogamp.common.util.cache.TempJarCache.validateCertificates(TempJarCache.java:393)
        at com.jogamp.common.util.cache.TempJarCache.bootstrapNativeLib(TempJarCache.java:350)
        at com.jogamp.common.os.Platform$3.run(Platform.java:312)
        at java.security.AccessController.doPrivileged(Native Method)
        at com.jogamp.common.os.Platform.loadGlueGenRTImpl(Platform.java:303)
        at com.jogamp.common.os.Platform.<clinit>(Platform.java:214)

Thanks
Vijay
gouessej
Reply | Threaded
Open this post in threaded view
♦
♦
|

Re: SecurityException - no certificate for libgluegen-rt.so

gouessej
Administrator
Hi

I understand your position but it is easy to work around it. Sign all JARs by yourself as I do for my own game. I use the same certificate for all JARs. You can automatize the signature of all JARs by using a build tool like Ant or Maven.
Julien Gouesse | Personal blog | Website
Sven Gothel
Reply | Threaded
Open this post in threaded view
♦
♦
|

Re: SecurityException - no certificate for libgluegen-rt.so

Sven Gothel
Administrator
On 02/23/2012 10:24 AM, gouessej [via jogamp] wrote:
>
>
> Hi
>
> I understand your position but it is easy to work around it. Sign all JARs
> by yourself as I do for my own game. I use the same certificate for all
> JARs. You can automatize the signature of all JARs by using a build tool
> like Ant or Maven.

Hold on Julien :)

Please don't push all folks away,
where we have an actual bug!

Of course you can do whatever you like (self signing etc)
however - we still provide the 'original' signed JAR files.

In case they are not working - we need to fix it.

~Sven


signature.asc (910 bytes) Download Attachment
Sven Gothel
Reply | Threaded
Open this post in threaded view
♦
♦
|

Re: SecurityException - no certificate for libgluegen-rt.so

Sven Gothel
Administrator
In reply to this post by vijaygandhi
On 02/22/2012 10:04 PM, vijaygandhi [via jogamp] wrote:

>
>
> Hi,
>
> I am trying to use JOGL and I get the following error when trying to run on
> Ubuntu, 64-bit, Sun Java 1.6.31. I am using the jars downloaded from
> http://jogamp.org/deployment/jogamp-current/jar/. Has anyone seen this error
> before?
>
> Caused by: java.lang.SecurityException: no certificate for libgluegen-rt.so
> in gluegen-rt-natives-linux-amd64.jar
> at com.jogamp.common.util.JarUtil.validateCertificate(JarUtil.java:510)
> at com.jogamp.common.util.JarUtil.validateCertificates(JarUtil.java:484)
> at
> com.jogamp.common.util.cache.TempJarCache.validateCertificates(TempJarCache.java:393)
> at
> com.jogamp.common.util.cache.TempJarCache.bootstrapNativeLib(TempJarCache.java:350)
> at com.jogamp.common.os.Platform$3.run(Platform.java:312)
> at java.security.AccessController.doPrivileged(Native Method)
> at com.jogamp.common.os.Platform.loadGlueGenRTImpl(Platform.java:303)
> at com.jogamp.common.os.Platform.<clinit>(Platform.java:214)
>
They are all signed with a valid signature!

Can you provide me a few more details ?

- You are using an Applet test or standalone ?
- How to reproduce the behavior ?

I will test with your mentioned 1.6.31 JRE ..

Thank you!

~Sven


signature.asc (910 bytes) Download Attachment
gouessej
Reply | Threaded
Open this post in threaded view
♦
♦
|

Re: SecurityException - no certificate for libgluegen-rt.so

gouessej
Administrator
In reply to this post by Sven Gothel
You're right but in the short term it is nice to have a workaround instead of "panicking". Moreover, when using Java Web Start, if you use different certificates, you have to use several JNLP files and then the final user has to click several times to confirm if he uses only a single application relying on JOGL.

I don't deny the actual behavior is a bug.
Julien Gouesse | Personal blog | Website
Sven Gothel
Reply | Threaded
Open this post in threaded view
♦
♦
|

Re: SecurityException - no certificate for libgluegen-rt.so

Sven Gothel
Administrator
On 02/23/2012 10:36 AM, gouessej [via jogamp] wrote:
>
>
> You're right but in the short term it is nice to have a workaround instead of
> "panicking". Moreover, when using Java Web Start, if you use different
> certificates, you have to use several JNLP files and then the final user has
> to click several times to confirm if he uses only a single application
> relying on JOGL.

In case you need your application to be signed - yes!

If you have a game and pure Java
you don't need your application/applet to be signed,
it's enough to have the JogAmp modules (gluegen/jogl) being signed.

Eg. our jogl-demos jar file is not signed,
as described on the applet test page and jogl-demo's page.

Sure, if you need something else to be signed,
your recommended process is best.

~Sven


signature.asc (910 bytes) Download Attachment
Sven Gothel
Reply | Threaded
Open this post in threaded view
♦
♦
|

Re: SecurityException - no certificate for libgluegen-rt.so

Sven Gothel
Administrator
In reply to this post by vijaygandhi
On 02/23/2012 10:34 AM, Sven Gothel wrote:

> On 02/22/2012 10:04 PM, vijaygandhi [via jogamp] wrote:
>>
>>
>> Hi,
>>
>> I am trying to use JOGL and I get the following error when trying to run on
>> Ubuntu, 64-bit, Sun Java 1.6.31. I am using the jars downloaded from
>> http://jogamp.org/deployment/jogamp-current/jar/. Has anyone seen this error
>> before?
>>
>> Caused by: java.lang.SecurityException: no certificate for libgluegen-rt.so
>> in gluegen-rt-natives-linux-amd64.jar
>> at com.jogamp.common.util.JarUtil.validateCertificate(JarUtil.java:510)
>> at com.jogamp.common.util.JarUtil.validateCertificates(JarUtil.java:484)
>> at
>> com.jogamp.common.util.cache.TempJarCache.validateCertificates(TempJarCache.java:393)
>> at
>> com.jogamp.common.util.cache.TempJarCache.bootstrapNativeLib(TempJarCache.java:350)
>> at com.jogamp.common.os.Platform$3.run(Platform.java:312)
>> at java.security.AccessController.doPrivileged(Native Method)
>> at com.jogamp.common.os.Platform.loadGlueGenRTImpl(Platform.java:303)
>> at com.jogamp.common.os.Platform.<clinit>(Platform.java:214)
>>
>
> They are all signed with a valid signature!
>
> Can you provide me a few more details ?
>
> - You are using an Applet test or standalone ?
> - How to reproduce the behavior ?
- Ubuntu 64bit
- 6u30 64bit
- I have cleaned my signature cache
- I have run etc/test.sh OK
- I have started an applet OK
  <http://jogamp.org/deployment/jogamp-current/jogl-test-applets.html>
  - I was asked to accept the certificate - YES

Downloading 6u31 .. and will test with it later.

~Sven


signature.asc (910 bytes) Download Attachment
gouessej
Reply | Threaded
Open this post in threaded view
♦
♦
|

Re: SecurityException - no certificate for libgluegen-rt.so

gouessej
Administrator
In reply to this post by Sven Gothel
You're right, what I said is only true for signed applications.

However, making an real game without signing its JARs is quite ... difficult. The player cannot save anything on the hard disc or on a remote server, the programmer cannot save the preferences. Only very casual games only displaying high scores online don't really need to be signed.
Julien Gouesse | Personal blog | Website
Sven Gothel
Reply | Threaded
Open this post in threaded view
♦
♦
|

Re: SecurityException - no certificate for libgluegen-rt.so

Sven Gothel
Administrator
In reply to this post by vijaygandhi
On 02/23/2012 10:49 AM, Sven Gothel wrote:

> On 02/23/2012 10:34 AM, Sven Gothel wrote:
>> On 02/22/2012 10:04 PM, vijaygandhi [via jogamp] wrote:
>>>
>>>
>>> Hi,
>>>
>>> I am trying to use JOGL and I get the following error when trying to run on
>>> Ubuntu, 64-bit, Sun Java 1.6.31. I am using the jars downloaded from
>>> http://jogamp.org/deployment/jogamp-current/jar/. Has anyone seen this error
>>> before?
>>>
>>> Caused by: java.lang.SecurityException: no certificate for libgluegen-rt.so
>>> in gluegen-rt-natives-linux-amd64.jar
>>> at com.jogamp.common.util.JarUtil.validateCertificate(JarUtil.java:510)
>>> at com.jogamp.common.util.JarUtil.validateCertificates(JarUtil.java:484)
>>> at
>>> com.jogamp.common.util.cache.TempJarCache.validateCertificates(TempJarCache.java:393)
>>> at
>>> com.jogamp.common.util.cache.TempJarCache.bootstrapNativeLib(TempJarCache.java:350)
>>> at com.jogamp.common.os.Platform$3.run(Platform.java:312)
>>> at java.security.AccessController.doPrivileged(Native Method)
>>> at com.jogamp.common.os.Platform.loadGlueGenRTImpl(Platform.java:303)
>>> at com.jogamp.common.os.Platform.<clinit>(Platform.java:214)
>>>
>>
>> They are all signed with a valid signature!
>>
>> Can you provide me a few more details ?
>>
>> - You are using an Applet test or standalone ?
>> - How to reproduce the behavior ?
>
> - Ubuntu 64bit
> - 6u30 64bit
> - I have cleaned my signature cache
> - I have run etc/test.sh OK
> - I have started an applet OK
>   <http://jogamp.org/deployment/jogamp-current/jogl-test-applets.html>
>   - I was asked to accept the certificate - YES
>
> Downloading 6u31 .. and will test with it later.
- just did so w/ 6u31

- Always cleaned the caches (resources / signatures)
  - 'javaws -viewer'
    - delete all resources
    - security: delete all signatures
- Tested: Webstart and NApplet - OK

So I cannot reproduce the bug you have seen,
please advise.

~Sven



signature.asc (910 bytes) Download Attachment
Free forum by Nabble Edit this page