Mixed code - Security prompt

Started by scarzzurs, October 06, 2010, 19:09:48

Previous topic - Next topic

scarzzurs

Hey there. I have just started to use lwjgl and are so far very happy with it. :-)

However, when I include the jnlp from http://lwjgl.org/jnlp/extension.php i get a security dialog that wants asks the user to block/unblock certain unspecified elements from my application(/lwjgl?). The dialog looks like this: http://dl.dropbox.com/u/11883400/screenshit.png

It seems I could avoid the issue by resigning all my jars and lwjgl jars. However this is hardly optimal as the user would then have to:
1. Trust me
2. be exposed to the dialog, even though they already trust lwjgl.

More info on the issue here:
http://download.oracle.com/javase/6/docs/technotes/guides/jweb/mixed_code.html
Without having understud everything in the above, it would seem like a single line of "code" in the manifest file of each jar, would fix the issue.

Sorry if I am reporting a minor issue, and if it is already known. I would just really like it to get fixed soon.

By the way:
1. I think there is a bug in the openAL tutorials on the website (the first), as the FloatBuffers should have been "flip"-ped somewhere in the code.
2. Why is the lwjgl jnlp distributed using a php-script. Couldn't a .htaccess-file (or something similar) have been used to make it more "clean"?
3. A big thanks to all who have contributed to lwjgl, it seems like a really nice piece of software. :-)

- Scarzzurs

kappa

I think the extension stuff is a pretty good idea and we should for the LWJGL 2.6+ release provide a LWJGL extension.

We already have all the pieces in place with the http://lwjgl.org/jnlp/extension.php and only need to add some attributes to the manifest.mf in the jars to get it to work completely.

Here is the full developers guide http://download.oracle.com/javase/1.4.2/docs/guide/plugin/developer_guide/extensions.html

Using an extension will only show a one time dialog to install the extension (as opposed to the normal certificate dialog on every run) and will be usable by both java web start and java applet.


scarzzurs

Good to hear that this is getting some attention. I'm very much looking forward to this :-)