Posted by Sven Gothel on Mar 15, 2014; 5:20pm
URL: https://forum.jogamp.org/deploying-JOGL-application-with-webstart-tp4031911p4031916.html

On 03/15/2014 05:02 PM, andyskinner [via jogamp] wrote:
> Hi.  I don't know much about Java deployment.  But I've got a program I've
> written on my own, as hobby, and I'd like to make it available.  Is this
> tutorial still a good example?
>  http://jogamp.org/wiki/index.php/Using_JOGL_in_Java_Web_Start

Yes .. they are up-to-date,
however do not reflect Oracle's latest 7u51 constraints .. :(

These errors usually occur due to rejection by the SecurityManager,
you should be able to see something in the log files.

In general .. if using Oracle's Plugin,
you need to sign all jar files by yourself:
  - GlueGen, JOGL _and_ your own code / demo
  - Apply all those magic manifest entries .. (duh .. PIA!)

<https://blogs.oracle.com/java-platform-group/entry/upcoming_exception_site_list_in>
<https://blogs.oracle.com/java-platform-group/entry/new_security_requirements_for_rias>
<http://www.ietf.org/rfc/rfc3161.txt> (don't ask ..)

However .. it still works, as you can see on our applet test page
  <http://jogamp.org/deployment/jogamp-current/jogl-test-applets.html>

+++

In short, Oracle almost accomplished the task to remove these deployment
facilities from non cooperated devs .. b/c they think snakeoil [1]
will help mitigating security holes in the sandbox (via obscurity).

[1] <https://en.wikipedia.org/wiki/Snake_oil_%28cryptography%29>

+++

See following git commits:

http://jogamp.org/git/?p=jogl.git;a=commit;h=5e8361d84078568d54b9561315151e2c5e287147

Adaption of Oracle's Deployment changes, i.e. >= 7u51

Sadly, due to Oracle's Java Applet Plugin update 7u51,
unsigned applets are no more allowed and effectively
lower the bar to create user applets with raised privileges.<br/>
Hence JogAmp Community <b>signs</b> jogl-all.jar and gluegen-rt.jar, which contain the
JOGL's supporting classes as well as jogl-test.jar, which contains the applet class.<br/>
jogl-test.jar's manifest file uses <i>Permissions: sandbox</i>
to <b>not raise privileges</b>.


+++

http://jogamp.org/git/?p=jogl.git;a=commit;h=59bde64e57125f8a8624018b9b4e224c757ee39b

Fix jogl-*-version.jnlp: Needs 'all-permissions' to match jogl-all.jar's manifest (Oracle's >= 7u51 constraints)

+++