Posted by gouessej on Jul 19, 2013; 8:36am
URL: https://forum.jogamp.org/Jogl-in-a-webstart-application-tp4029613p4029615.html

PixelApp is right. You get this warning because you use JARs whose codebase written in the "Codebase" manifest attribute don't match with their real codebase. You can use the JNLP "extensions" for JOGL like PixelApp suggests or you can download unsigned JARs, modify their manifests (remove or update the "Codebase" attribute), sign them and deploy them by yourself like me. The both methods have their pros and cons, PixelApp's suggestion is easier, mine allows you to use the same certificate to sign all dependencies and your own JARs and to have a greater control on which build you use, where the end users get it, etc... In my case I don't enable Pack200 because I found it not reliable enough and the speedup was not obvious in many cases.