openjdk team mailing list archive

[Jamie Heilman <jamie@xxxxxxxxxxxxxxxxxxxxx>]

Package: icedtea-netx
Version: 1.1.2-1

The downloader Web Start application HDtracks (www.hdtracks.com) uses
for purchases used to work as recently as version 1.1-1, but now it
just kicks out an error about not being able to connect to their
service.  Using Oracle's javaws from the 1.7.0 JRE, the app works fine.

Fiddling with things I was able to add -verbose to to the javaws
command line and hence enable "debugging" such as it is, which revealed:

Selecting proxy for: https://www.hdtracks.com//scripts/openOrders.php?uid=REDACTED&hashid=REDACTED
Browser proxy option "4" (Automatic) not supported yet.
Browser selected proxies: [DIRECT]
Selected proxies: [DIRECT]
Selecting proxy for: socket://www.hdtracks.com:443
Browser proxy option "4" (Automatic) not supported yet.
Browser selected proxies: [DIRECT]
Selected proxies: [DIRECT]
Requesting permission: (java.lang.RuntimePermission accessClassInPackage.sun.security.rsa)
Denying permission: (java.lang.RuntimePermission accessClassInPackage.sun.security.rsa)

("REDACTED" in the URL is not the litteral value, that's just me removing my
session identifiers.)

It all appears to be related to the addition of the javaws.policy
file.  So after fumbling around and reading up on things I applied:

--- /etc/icedtea-web/javaws.policy.orig 2011-09-24 03:44:41.856667471 -0700
+++ /etc/icedtea-web/javaws.policy      2011-09-24 03:42:38.473334213 -0700
@@ -11,4 +11,7 @@
 
    permission java.lang.RuntimePermission
    "accessClassInPackage.sun.security.internal.interfaces";
+
+   permission java.lang.RuntimePermission
+   "accessClassInPackage.sun.security.rsa";
 };


...and everything worked again.  So, might wanna take a harder look at
https://bugzilla.redhat.com/show_bug.cgi?id=471413 or evaluate why
Oracle ships with "permission java.security.AllPermission;" in their
default javaws policy file.

FWIW, there are probably easier Web Start applications to test with,
but HDtracks does offer a free sampler download if you want to try
their particular app, just be aware that once you've downloaded it in
its entirety you can't keep trying, hence you'd need to interrupt any
working download (just close the app) to keep testing this issue.
(...and I suppose that could be somewhat rude to use their bandwidth
that way if you didn't interrupt the download early on in a track, as
the app doesn't appear to do any form of partial file download
continuation and starts at the beginning of the last incomplete track
every time; something to consider if you do use them for testing.)

-- 
Jamie Heilman                     http://audible.transient.net/~jamie/