← Back to team overview

openjdk team mailing list archive

[Bug 898823] [NEW] SparkAngels cannot connect to its servers : java.security.AccessControlException: access denied (java.lang.RuntimePermission accessClassInPackage.sun.security.internal.spec)

 

Public bug reported:

SparkAngels is a java application that is runned via JNLP. http://www.spark-angels.com
The current jnlp file can be found here : http://dnld0.sparkom.com/sparkangels/sangels/sparkangels.jnlp


With OpenJDK 6b20-1.9.10-0ubuntu1~10.04.2, it starts OK, but fails to connect to its servers.

To reproduce, you can start the JNLP on command-line (javaws sparkangels.jnlp), open the dropdown "Options", choose "Utilisation par code" then "Obtenir un code" (this is in French, maybe it would be translated in your language when you run it)
At this moment, the application tries to connect to its servers and it fails with the following error message in the log :
---W-A-R-N-I-N-G--- IO-ERROR CONTACTING SERVER cccp1.sparkom.com: java.security.AccessControlException: access denied (java.lang.RuntimePermission accessClassInPackage.sun.security.internal.spec)
---W-A-R-N-I-N-G--- IO-ERROR CONTACTING SERVER cccp0.sparkom.com: java.security.AccessControlException: access denied (java.lang.RuntimePermission accessClassInPackage.sun.security.internal.spec)
sparkangels.xu: No server available
	at sparkangels.lt.b(Unknown Source)
	at sparkangels.vq.a(Unknown Source)
	at sparkangels.vq.a(Unknown Source)
	at sparkangels.vq.a(Unknown Source)
	at sparkangels.q.m(Unknown Source)
	at sparkangels.q.b(Unknown Source)
	at sparkangels.ih.run(Unknown Source)
---W-A-R-N-I-N-G--- EXCEPTION MESSAGE: No server available

If I use sun-java-6 packages instead of openjdk-6, it works correctly.
If I try to open the same jnlp with oneiric (with version 6b23~pre11-0ubuntu1.11.10), it works correctly.

So it looks like a bug on this version of openjdk, that has been fixed in latest ubuntu version.
I found a workaround here : https://bugzilla.redhat.com/show_bug.cgi?id=471413#c33
You simply have to create a file ~/.java.policy with this content :
grant {
   permission java.security.SecurityPermission 
        "putProviderProperty.SunJCE";
   permission java.lang.RuntimePermission
        "accessClassInPackage.sun.security.internal.spec";
   permission java.lang.RuntimePermission
       "accessClassInPackage.sun.security.rsa";
   permission java.lang.RuntimePermission
        "accessClassInPackage.sun.security.internal.interfaces";
};


This application is very usefull to provide assistance through a remote desktop access. It's an alternative to VNC when NAT/port-forwarding is not properly configured.
Ideally, a backport would
A similar problem seems to happen on other java applications : http://www.havenandhearth.com/forum/viewtopic.php?f=4&t=15576

ProblemType: Bug
DistroRelease: Ubuntu 10.04
Package: openjdk-6-jre 6b20-1.9.10-0ubuntu1~10.04.2
ProcVersionSignature: Ubuntu 2.6.38-13.52~lucid1-generic 2.6.38.8
Uname: Linux 2.6.38-13-generic x86_64
Architecture: amd64
CheckboxSubmission: bb64787174aa01f1fb7ecfce8a2f831c
CheckboxSystem: 34179ae9d787c87b2b99043345f17cea
Date: Thu Dec  1 21:42:28 2011
ExecutablePath: /usr/lib/jvm/java-6-openjdk/jre/bin/javaws.real
InstallationMedia: Ubuntu 10.04 LTS "Lucid Lynx" - Release amd64 (20100427.1)
ProcEnviron:
 LANG=fr_FR.utf8
 SHELL=/bin/bash
SourcePackage: openjdk-6

** Affects: openjdk-6 (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug lucid

-- 
You received this bug notification because you are a member of OpenJDK,
which is subscribed to openjdk-6 in Ubuntu.
https://bugs.launchpad.net/bugs/898823

Title:
  SparkAngels cannot connect to its servers :
  java.security.AccessControlException: access denied
  (java.lang.RuntimePermission
  accessClassInPackage.sun.security.internal.spec)

Status in “openjdk-6” package in Ubuntu:
  New

Bug description:
  SparkAngels is a java application that is runned via JNLP. http://www.spark-angels.com
  The current jnlp file can be found here : http://dnld0.sparkom.com/sparkangels/sangels/sparkangels.jnlp

  
  With OpenJDK 6b20-1.9.10-0ubuntu1~10.04.2, it starts OK, but fails to connect to its servers.

  To reproduce, you can start the JNLP on command-line (javaws sparkangels.jnlp), open the dropdown "Options", choose "Utilisation par code" then "Obtenir un code" (this is in French, maybe it would be translated in your language when you run it)
  At this moment, the application tries to connect to its servers and it fails with the following error message in the log :
  ---W-A-R-N-I-N-G--- IO-ERROR CONTACTING SERVER cccp1.sparkom.com: java.security.AccessControlException: access denied (java.lang.RuntimePermission accessClassInPackage.sun.security.internal.spec)
  ---W-A-R-N-I-N-G--- IO-ERROR CONTACTING SERVER cccp0.sparkom.com: java.security.AccessControlException: access denied (java.lang.RuntimePermission accessClassInPackage.sun.security.internal.spec)
  sparkangels.xu: No server available
  	at sparkangels.lt.b(Unknown Source)
  	at sparkangels.vq.a(Unknown Source)
  	at sparkangels.vq.a(Unknown Source)
  	at sparkangels.vq.a(Unknown Source)
  	at sparkangels.q.m(Unknown Source)
  	at sparkangels.q.b(Unknown Source)
  	at sparkangels.ih.run(Unknown Source)
  ---W-A-R-N-I-N-G--- EXCEPTION MESSAGE: No server available

  If I use sun-java-6 packages instead of openjdk-6, it works correctly.
  If I try to open the same jnlp with oneiric (with version 6b23~pre11-0ubuntu1.11.10), it works correctly.

  So it looks like a bug on this version of openjdk, that has been fixed in latest ubuntu version.
  I found a workaround here : https://bugzilla.redhat.com/show_bug.cgi?id=471413#c33
  You simply have to create a file ~/.java.policy with this content :
  grant {
     permission java.security.SecurityPermission 
          "putProviderProperty.SunJCE";
     permission java.lang.RuntimePermission
          "accessClassInPackage.sun.security.internal.spec";
     permission java.lang.RuntimePermission
         "accessClassInPackage.sun.security.rsa";
     permission java.lang.RuntimePermission
          "accessClassInPackage.sun.security.internal.interfaces";
  };

  
  This application is very usefull to provide assistance through a remote desktop access. It's an alternative to VNC when NAT/port-forwarding is not properly configured.
  Ideally, a backport would
  A similar problem seems to happen on other java applications : http://www.havenandhearth.com/forum/viewtopic.php?f=4&t=15576

  ProblemType: Bug
  DistroRelease: Ubuntu 10.04
  Package: openjdk-6-jre 6b20-1.9.10-0ubuntu1~10.04.2
  ProcVersionSignature: Ubuntu 2.6.38-13.52~lucid1-generic 2.6.38.8
  Uname: Linux 2.6.38-13-generic x86_64
  Architecture: amd64
  CheckboxSubmission: bb64787174aa01f1fb7ecfce8a2f831c
  CheckboxSystem: 34179ae9d787c87b2b99043345f17cea
  Date: Thu Dec  1 21:42:28 2011
  ExecutablePath: /usr/lib/jvm/java-6-openjdk/jre/bin/javaws.real
  InstallationMedia: Ubuntu 10.04 LTS "Lucid Lynx" - Release amd64 (20100427.1)
  ProcEnviron:
   LANG=fr_FR.utf8
   SHELL=/bin/bash
  SourcePackage: openjdk-6

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openjdk-6/+bug/898823/+subscriptions



Follow ups

References