用于java swing的jnlp jar的安全问题 [英] Security issue with jnlp jar for java swing

问题描述

如何创建完全安全性证明jnlp。我创建了一个jnlp并上传到我的在线服务器上。它根本不工作，但在我的本地，它工作正常。

How to create totally security proof jnlp. I created one jnlp and uploaded on my online server. It is not working at all, but in my local, it is working fine.

我的在线JNLP正在打开GUI，只有当我将java安全级别降低到中等时（我认为它根本不安全）并且它不起作用（没有任何功能正常工作）

My online JNLP is opening GUI, only when, i decrease the java security level to medium( i think it is not secure at all) and it is not working (none of the functionality is working)

我用Google搜索了它，但找不到任何有用的东西。
已修改
您能否请验证JNLP文件...找到链接 ..这个应用程序在我的本地运行完全正常..它不工作......可能是什么原因？

I googled it about it, but could not find anything useful. Edited Can you please verify the JNLP file...find at link..This application is running perfectly fine in my local..it is not working..what could be the reason?

推荐答案

基本上做或阅读以下内容：

Basically do or read the following:

1. 使用官方证书签署您的应用程序和所有罐子


2. 同时签署您的JNLP文件（意味着将您的jnlp文件的副本放入JNLP-INF文件夹中，如上所述此处。


3. 设置权限（例如，所有< security>< all-permissions />< / security> ）


4. 设置trusted-library | trusted-only属性（此处有更多信息）


5. [可选]设置7u25在JAR清单文件中引入了权限和代码库属性（此处有更多信息）

1. Sign your app and all your jars with an official certificate
2. Also "sign" your JNLP file (meaning put a copy of your jnlp file into JNLP-INF folder as described here.
3. Set the permissions right (e.g. all <security><all-permissions/></security>)
4. Set the trusted-library | trusted-only attributes (More infos here)
5. [optional] Set the 7u25 introduced permissions and codebase attributes in the JAR Manifest File(s) (More infos here)

有关更多信息，请查看：

For more information also look:

Jar签名

7u21发行说明

如果您的jnlp文件有问题，请使用验证它JaNeLA 。

And if you have trouble with your jnlp file verify it with JaNeLA.

这篇关于用于java swing的jnlp jar的安全问题的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！