LWJGL Forum

Programming => Lightweight Java Gaming Library => Topic started by: scarzzurs on October 06, 2010, 19:09:48

Title: Mixed code - Security prompt
Post by: scarzzurs on October 06, 2010, 19:09:48
Hey there. I have just started to use lwjgl and are so far very happy with it. :-)

However, when I include the jnlp from http://lwjgl.org/jnlp/extension.php i get a security dialog that wants asks the user to block/unblock certain unspecified elements from my application(/lwjgl?). The dialog looks like this: http://dl.dropbox.com/u/11883400/screenshit.png

It seems I could avoid the issue by resigning all my jars and lwjgl jars. However this is hardly optimal as the user would then have to:
1. Trust me
2. be exposed to the dialog, even though they already trust lwjgl.

More info on the issue here:
http://download.oracle.com/javase/6/docs/technotes/guides/jweb/mixed_code.html
Without having understud everything in the above, it would seem like a single line of "code" in the manifest file of each jar, would fix the issue.

Sorry if I am reporting a minor issue, and if it is already known. I would just really like it to get fixed soon.

By the way:
1. I think there is a bug in the openAL tutorials on the website (the first), as the FloatBuffers should have been "flip"-ped somewhere in the code.
2. Why is the lwjgl jnlp distributed using a php-script. Couldn't a .htaccess-file (or something similar) have been used to make it more "clean"?
3. A big thanks to all who have contributed to lwjgl, it seems like a really nice piece of software. :-)

- Scarzzurs
Title: Re: Mixed code - Security prompt
Post by: kappa on October 06, 2010, 22:41:05
I think the extension stuff is a pretty good idea and we should for the LWJGL 2.6+ release provide a LWJGL extension.

We already have all the pieces in place with the http://lwjgl.org/jnlp/extension.php and only need to add some attributes to the manifest.mf in the jars to get it to work completely.

Here is the full developers guide http://download.oracle.com/javase/1.4.2/docs/guide/plugin/developer_guide/extensions.html

Using an extension will only show a one time dialog to install the extension (as opposed to the normal certificate dialog on every run) and will be usable by both java web start and java applet.

Title: Re: Mixed code - Security prompt
Post by: scarzzurs on October 08, 2010, 11:46:13
Good to hear that this is getting some attention. I'm very much looking forward to this :-)