[jdk9] Webstart app is logging a SecurityException

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view

[jdk9] Webstart app is logging a SecurityException

Reto Merz-2

While we test our WebStart app with Java 9 we noticed that a SecurityException is silently logged to the Java Webstart Console:

Exception in thread "Thread-13" java.lang.SecurityException: Sicherheitspaket-JAR-Datei kann nicht gepr├╝ft werden
        at jdk.deploy@9-ea/com.sun.deploy.util.SecurityBaseline.verifyJar(Unknown Source)
        at jdk.deploy@9-ea/com.sun.deploy.util.SecurityBaseline.access$200(Unknown Source)
        at jdk.deploy@9-ea/com.sun.deploy.util.SecurityBaseline$1.run(Unknown Source)
        at java.base/java.lang.Thread.run(Unknown Source)

The app continues to work, we have not found any side effects yet.

One conspicuous thing is that this is just logged after we call:

I have not found any related open issue on https://bugs.openjdk.java.net
All our JARs are signed and JNLP also request all-permissions.
Tested with Java 9 b157 and Windows 7.
The exception is not logged with Java 8 u121.

Should we fill a report on bugreport.java.com for this ?

Btw SecurityBaseline starts multiple threads, it would be great to give this threads a descriptive name.