CFGrid with Java 7u45 warnings about missing JAR manifest Permissions attribute

Recent updates to CFGrid are now signed Java applets that no longer expire, however Oracle has updated the security model for Java again.  The recent Java 7 update 45 now displays this warning dialog, indicating that future Java 7 updates (Java 7u51 Jan 14 2014) will not allow the application to run:
Does this need to be fixed by Adobe, since I assume end users cannot fix the applet with the information in the links provided by Oracle
Enhancing Security with Manifest Attributes
Modifying a Manifest File
If Adobe doesn't update the CFGrid applet, does anyone know if the new Java 7u40 deployment rule set feature can be used to avoid this warning?

This issue affects CF 9 and 10.  Adobe is working on it.  You might want to follow this forum thread for more information: https://forums.adobe.com/message/6761720#6761720
-Carl V.

Similar Messages

  • Extensions Log complais about missing jars

    Hello!
    Extensions Log complains about missing jars
    Where can I find these jars?
    How to solve these problems?
    oracle.bpm.bpa
    Warning: Classpath entry C:\Oracle\Middleware\JDev\pcbpel\fabric\lib\orawsdl.jar not found.
    oracle.bpm.bpm-services.client
    Warning: Classpath entry C:\Oracle\Middleware\JDev\pcbpel\lib\j2ee\orasaaj.jar not found.
    Warning: Classpath entry C:\Oracle\Middleware\JDev\pcbpel\generated\jrf\orasaaj-rt.jar not found.
    Warning: Classpath entry C:\Oracle\Middleware\JDev\pcbpel\generated\jrf\wsclient.jar not found.
    Warning: Classpath entry C:\Oracle\Middleware\JDev\pcbpel\generated\jrf\wsclient-rt.jar not found.
    oracle.bpm.casemanagement.implementation
    Warning: Classpath entry C:\Oracle\Middleware\JDev\pcbpel\lib\j2ee\javax.persistence_1.0.0.0_1-0-2.jar not found.
    Warning: Classpath entry C:\Oracle\Middleware\JDev\pcbpel\fabric\lib\orawsdl.jar not found.
    oracle.bpm.compiler
    Warning: Classpath entry C:\Oracle\Middleware\JDev\jdeveloper\jdev\extensions\oracle.bpm.compiler.jar!\ade_autofs\nfsdo_base\JDK6\MAIN\LINUX\110210.1.6.0.24.B50\jdk6\lib\tools.jar not found.
    oracle.bpm.fusion.jdeveloper
    Warning: Classpath entry C:\Oracle\Middleware\JDev\jdeveloper\soa\modules\oracle.bpm.activityguide-ui_11.1.1.jar not found.
    oracle.bpm.pml.service
    Warning: Classpath entry C:\Oracle\Middleware\JDev\pcbpel\fabric\lib\soa-infra-mgmt.jar not found.
    oracle.bpm.project.catalog
    Warning: Classpath entry C:\Oracle\Middleware\JDev\jdeveloper\jdev\lib\adfm.jar not found.
    Warning: Classpath entry C:\Oracle\Middleware\JDev\jdeveloper\jdev\lib\ojdbc6dms.jar not found.
    Warning: Classpath entry C:\Oracle\Middleware\JDev\pcbpel\generated\jrf\dms.jar not found.
    Warning: Classpath entry C:\Oracle\Middleware\JDev\jdeveloper\lib\ojdl.jar not found.

    maybe I failed in my explanation..
    Versions:
    ADF Business Components     11.1.1.60.13
    BPMN Editor     11.1.1.5.0.0174
    Java(TM) Platform     1.6.0_24
    Oracle IDE     11.1.1.5.37.60.13
    SOA Composite Editor     11.1.1.5.0.01.74
    Versioning Support     11.1.1.5.37.60.13
    I have Oracle BPM Studio 11g and Oracle SOA Composite Editor
    I've looked for new updates that might resolve this but nothing ..

  • Newbe to Java NEED HELP about : field vs property vs attribute!!!!

    i am studying java now!i have a problem with field ,property, attribute of a java class!!!
    i am so confused!!!can everybody give me a clear definition and explain the difference between field , property and attribute in java???
    it is difficult to distinguish for me!!!

    I don't think there are any hard-and-fast rules.
    Roughly, though:
    A field is a member variable.
    A property is what is exposed via JavaBeans.
    An attribute is an abstract element of the abstract entity being modeled.
    Often times, they're all the same thing, but they don't have to be.
    For example, take a Person object. In the abstract sense, independent of Java, age is an attribute of a person. In addition to that, you might have an "age" member variable. And when you inspect a Person using JavaBeans, you will probably find an "age" property.
    And it's possible that the JavaBeans property will come directly from the field--the "age" member variable:
    public class Person {
      private int age;
      public int getAge() {
        return age;
    }JavaBeans inspection will find the getAge() method and by the "getter" convention will determine that there is an "age" property. The class has an "age" field that happens to have the same name as the "age" property, and the property's value comes straight from the field.
    And both the field and the property correspond to the age attribute of the abstract person concept.
    Of course, the problem there is that if we don't update the "age" field (member variable), then the state of the object becomes less accurate over time. So we might do this instead:
    public class Person {
      private Date birthDate;
      public int getAge() {
        // calculate age based on birthDate and the current day;
    }Here, we still have a property named "age" that corresponds to the age attribute, because JavaBeans inspection will find the getAge() method. But there's no "age" field.
    Now, having said all that, I should point out that in common usage, the three terms are used somewhat interchangeably.

  • Error with Java WebStart Signed Jars on 1.6.0_19's new Mixed  Code

    All,
    First, we have a valid code signing certificate/keystore from Thawte that works for signing webstart jars as of update 18. For some reason, if you run our webstart application on update 19 JRE, the runtime believes that some of the jars are not signed and some are. Even though we create and sign the jars in the exact same way and after inspecting the jar the JRE believes are not signed they have the necessary signing entries/files in the manifest folder. Not sure why the signing process would work for some of our jars and not for others. There is nothing really all that different.
    So, because the JRE believes some of the jars are not signed the new security warning "...contains both signed and unsigned code." pops up ( [Error Description|http://java.com/en/download/help/error_mixedcode.xml] ). If I press yes, then I get the following exception.
    java.lang.SecurityException: trusted loader attempted to load sandboxed resource from https://path-to-our.jar
         at com.sun.deploy.security.CPCallbackHandler$ParentCallback.check(Unknown Source)
         at com.sun.deploy.security.CPCallbackHandler$ParentCallback.access$1400(Unknown Source)
         at com.sun.deploy.security.CPCallbackHandler$ChildElement.checkResource(Unknown Source)
         at com.sun.deploy.security.DeployURLClassPath$JarLoader.checkResource(Unknown Source)
         at com.sun.deploy.security.DeployURLClassPath$JarLoader.getResource(Unknown Source)
         at com.sun.deploy.security.DeployURLClassPath.getResource(Unknown Source)
         at java.net.URLClassLoader$1.run(Unknown Source)
         at java.security.AccessController.doPrivileged(Native Method)
         at java.net.URLClassLoader.findClass(Unknown Source)
         at com.sun.jnlp.JNLPClassLoader.findClass(Unknown Source)
         at java.lang.ClassLoader.loadClass(Unknown Source)
         at java.lang.ClassLoader.loadClass(Unknown Source)
         at main.JwsMain.main(JwsMain.java:32)
         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
         at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
         at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
         at java.lang.reflect.Method.invoke(Unknown Source)
         at com.sun.javaws.Launcher.executeApplication(Unknown Source)
         at com.sun.javaws.Launcher.executeMainClass(Unknown Source)
         at com.sun.javaws.Launcher.doLaunchApp(Unknown Source)
         at com.sun.javaws.Launcher.run(Unknown Source)
         at java.lang.Thread.run(Unknown Source)If I press "no" I get the following exception (I get this exception if I try to run our WebStart application with no signed jars as well, no warnings about missing certs, just straight to error)
    java.lang.NullPointerException
         at com.sun.deploy.cache.CachedJarFile.findMatchingSignerIndices(Unknown Source)
         at com.sun.deploy.cache.CachedJarFile.entryNames(Unknown Source)
         at com.sun.deploy.cache.DeployCacheJarAccessImpl.entryNames(Unknown Source)
         at com.sun.deploy.security.CPCallbackHandler.assertTrust(Unknown Source)
         at com.sun.deploy.security.CPCallbackHandler.access$700(Unknown Source)
         at com.sun.deploy.security.CPCallbackHandler$ParentCallback.check(Unknown Source)
         at com.sun.deploy.security.CPCallbackHandler$ParentCallback.access$1400(Unknown Source)
         at com.sun.deploy.security.CPCallbackHandler$ChildElement.checkResource(Unknown Source)
         at com.sun.deploy.security.DeployURLClassPath$JarLoader.checkResource(Unknown Source)
         at com.sun.deploy.security.DeployURLClassPath$JarLoader.getResource(Unknown Source)
         at com.sun.deploy.security.DeployURLClassPath.getResource(Unknown Source)
         at java.net.URLClassLoader$1.run(Unknown Source)
         at java.security.AccessController.doPrivileged(Native Method)
         at java.net.URLClassLoader.findClass(Unknown Source)
         at com.sun.jnlp.JNLPClassLoader.findClass(Unknown Source)
         at java.lang.ClassLoader.loadClass(Unknown Source)
         at java.lang.ClassLoader.loadClass(Unknown Source)
         at main.JwsMain.main(JwsMain.java:32)
         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
         at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
         at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
         at java.lang.reflect.Method.invoke(Unknown Source)
         at com.sun.javaws.Launcher.executeApplication(Unknown Source)
         at com.sun.javaws.Launcher.executeMainClass(Unknown Source)
         at com.sun.javaws.Launcher.doLaunchApp(Unknown Source)
         at com.sun.javaws.Launcher.run(Unknown Source)
         at java.lang.Thread.run(Unknown Source)Does anyone know why this would be happening? It only occurs with the new update. We use the same keystore and process for signing all of our jars so it really doesn't make since why some of them work and some of them don't. Also, our JNLP is correct or it wouldn't work in update 18.
    Edit: We've tried it on Windows XP SP3 and compiled the code using update 18 and used jarsigner both from 18 and 19 with same results.
    Edited by: chenthor on Apr 1, 2010 8:44 AM
    Edited by: chenthor on Apr 1, 2010 8:51 AM

    Hi All,
    So we've been battling this bug for a year or so now, and I've come up with a solution to the webstart bugs
    http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6967414
    http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6805618
    (see the bugs for more details)
    From what we can tell the bug stems from the way that the jar signers information is "cached" by webstart.
    When a jar is loaded by webstart, it is represented by a CachedJarFile instance. When loading and using classes the signature for the jar is verified. The signers used is the one that is stored in the CachedJarFile instances. These "signers" are stored as SoftReferences. SoftReferences are like WeakReferences, except that they only become eligible for garbage collection when there is a small amount of available heaps space remaining and that the object is only softly reachable. (That's a pretty crude description, but it will do for now)
    So what we found was happening is that when the JVM reached a certain heap size threshold and needed to allocate more heap, that these soft references (and hence the signers information) werebeing garbage collected. if you attempt to load a class after this you get the security error.
    So I came up with a hack to work around this. At application startup, iterate through all of the CachedJarFile objects on the classpath and create a hard reference to each of the signers info by putting them in a static list somewhere. From our tests this seems to work. (though with the intermittent nature of the problem, it has been hard to prove conclusively, though we've had some success repro-ing the issue, by reducing the intial heap size and using VisualVM to watch for heap expansions and forcing gc's)
    Below is the code for the hack, to run it just call JarSignersHardLinker.go() and it will do some sanity checks (running on webstart on java 1.6 update 19 or higher) before spawning a new thread to create hard refs for all signers info for all jars on the classpath.
    import java.io.IOException;
    import java.lang.ref.SoftReference;
    import java.lang.reflect.Field;
    import java.lang.reflect.InvocationTargetException;
    import java.lang.reflect.Method;
    import java.net.JarURLConnection;
    import java.net.URL;
    import java.net.URLConnection;
    import java.util.ArrayList;
    import java.util.Enumeration;
    import java.util.LinkedHashSet;
    import java.util.List;
    import java.util.Set;
    import java.util.jar.JarFile;
    * A utility class for working around the java webstart jar signing/security bug
    * see http://bugs.sun.com/view_bug.do?bug_id=6967414 and http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6805618
    * @author Scott Chan
    public class JarSignersHardLinker {
        private static final String JRE_1_6_0 = "1.6.0_";
         * the 1.6.0 update where this problem first occurred
        private static final int PROBLEM_JRE_UPDATE = 19;
        public static final List sm_hardRefs = new ArrayList();
        protected static void makeHardSignersRef(JarFile jar) throws java.io.IOException {
            System.out.println("Making hard refs for: " + jar );
            if(jar != null && jar.getClass().getName().equals("com.sun.deploy.cache.CachedJarFile")) {
                 //lets attempt to get at the each of the soft links.
                 //first neet to call the relevant no-arg method to ensure that the soft ref is populated
                 //then we access the private member, resolve the softlink and throw it in a static list.
                callNoArgMethod("getSigners", jar);
                makeHardLink("signersRef", jar);
                callNoArgMethod("getSignerMap", jar);
                makeHardLink("signerMapRef", jar);
    //            callNoArgMethod("getCodeSources", jar);
    //            makeHardLink("codeSourcesRef", jar);
                callNoArgMethod("getCodeSourceCache", jar);
                makeHardLink("codeSourceCacheRef", jar);
         * if the specified field for the given instance is a Softreference
         * That soft reference is resolved and the returned ref is stored in a static list,
         * making it a hard link that should never be garbage collected
         * @param fieldName
         * @param instance
        private static void makeHardLink(String fieldName, Object instance) {
            System.out.println("attempting hard ref to " + instance.getClass().getName() + "." + fieldName);
            try {
                Field signersRef = instance.getClass().getDeclaredField(fieldName);
                signersRef.setAccessible(true);
                Object o = signersRef.get(instance);
                if(o instanceof SoftReference) {
                    SoftReference r = (SoftReference) o;
                    Object o2 = r.get();
                    sm_hardRefs.add(o2);
                } else {
                    System.out.println("noooo!");
            } catch (NoSuchFieldException e) {
                e.printStackTrace();
                return;
            } catch (IllegalAccessException e) {
                e.printStackTrace();
         * Call the given no-arg method on the given instance
         * @param methodName
         * @param instance
        private static void callNoArgMethod(String methodName, Object instance) {
            System.out.println("calling noarg method hard ref to " + instance.getClass().getName() + "." + methodName + "()");
            try {
                Method m = instance.getClass().getDeclaredMethod(methodName);
                m.setAccessible(true);
                m.invoke(instance);
            } catch (SecurityException e1) {
                e1.printStackTrace();
            } catch (NoSuchMethodException e1) {
                e1.printStackTrace();
            } catch (IllegalArgumentException e) {
                e.printStackTrace();
            } catch (IllegalAccessException e) {
                e.printStackTrace();
            } catch (InvocationTargetException e) {
                e.printStackTrace();
         * is the preloader enabled. ie: will the preloader run in the current environment
         * @return
        public static boolean isHardLinkerEnabled() {
             boolean isHardLinkerDisabled = false;  //change this to use whatever mechanism you use to enable or disable the preloader
            return !isHardLinkerDisabled && isRunningOnJre1_6_0_19OrHigher() && isRunningOnWebstart();
         * is the application currently running on webstart
         * detect the presence of a JNLPclassloader
         * @return
        public static boolean isRunningOnWebstart() {
            ClassLoader cl = Thread.currentThread().getContextClassLoader();
            while(cl != null) {
                if(cl.getClass().getName().equals("com.sun.jnlp.JNLPClassLoader")) {
                    return true;
                cl = cl.getParent();
            return false;
         * Is the JRE 1.6.0_19 or higher?
         * @return
        public static boolean isRunningOnJre1_6_0_19OrHigher() {
            String javaVersion = System.getProperty("java.version");
            if(javaVersion.startsWith(JRE_1_6_0)) {
                //then lets figure out what update we are on
                String updateStr = javaVersion.substring(JRE_1_6_0.length());
                try {
                    return Integer.parseInt(updateStr) >= PROBLEM_JRE_UPDATE;
                } catch (NumberFormatException e) {
                    //then unable to determine updatedate level
                    return false;
            //all other cases
            return false;
          * get all the JarFile objects for all of the jars in the classpath
          * @return
         public static Set<JarFile> getAllJarsFilesInClassPath() {
              Set<JarFile> jars = new LinkedHashSet<JarFile> ();
             for (URL url : getAllJarUrls()) {
                 try {
                     jars.add(getJarFile(url));
                 } catch(IOException e) {
                      System.out.println("unable to retrieve jar at URL: " + url);
             return jars;
         * Returns set of URLS for the jars in the classpath.
         * URLS will have the protocol of jar eg: jar:http://HOST/PATH/JARNAME.jar!/META-INF/MANIFEST.MF
        static Set<URL> getAllJarUrls() {
            try {
                Set<URL> urls = new LinkedHashSet<URL>();
                Enumeration<URL> mfUrls = Thread.currentThread().getContextClassLoader().getResources("META-INF/MANIFEST.MF");
                while(mfUrls.hasMoreElements()) {
                    URL jarUrl = mfUrls.nextElement();
    //                System.out.println(jarUrl);
                    if(!jarUrl.getProtocol().equals("jar")) continue;
                    urls.add(jarUrl);
                return urls;
            } catch(IOException e) {
                throw new RuntimeException(e);
         * get the jarFile object for the given url
         * @param jarUrl
         * @return
         * @throws IOException
        public static JarFile getJarFile(URL jarUrl) throws IOException {
            URLConnection urlConnnection = jarUrl.openConnection();
            if(urlConnnection instanceof JarURLConnection) {
                // Using a JarURLConnection will load the JAR from the cache when using Webstart 1.6
                // In Webstart 1.5, the URL will point to the cached JAR on the local filesystem
                JarURLConnection jcon = (JarURLConnection) urlConnnection;
                return jcon.getJarFile();
            } else {
                throw new AssertionError("Expected JarURLConnection");
         * Spawn a new thread to run through each jar in the classpath and create a hardlink
         * to the jars softly referenced signers infomation.
        public static void go() {
            if(!isHardLinkerEnabled()) {
                return;
            System.out.println("Starting Resource Preloader Hardlinker");
            Thread t = new Thread(new Runnable() {
                public void run() {
                    try {
                        Set<JarFile> jars = getAllJarsFilesInClassPath();
                        for (JarFile jar : jars) {
                            makeHardSignersRef(jar);
                    } catch (Exception e) {
                        System.out.println("Problem preloading resources");
                        e.printStackTrace();
                    } catch (Error e) {
                         System.out.println("Error preloading resources");
                         e.printStackTrace();
            t.start();
    }

  • Component-based software engineering with Java

    I would like to code a java application using:
    http://en.wikipedia.org/wiki/Component-based_software_engineering
    just like I would do in C using:
    http://en.wikipedia.org/wiki/GObject
    having objects that emit signals and other objects can attach to those signals.
    How may I do that in Java?
    I would like exactly that. Not something less. And no distributed (no network)

    robertojimenoca wrote:
    I have decided not to use Swing for the GUI but just output to the console. I want to register to my component signal and just print lines with the status.
    Is that possible with Java?
    How about a simple example?Sounds like you're talking observer/observable. There are multiple ways to implement that pattern in Java, one of them being a class and interface with those names in the java.util package.
    If you want a more specific answer, you'll probably have to ask a more specific question.
    And if you google java X tutorial or java X example, for any reasonable X, you'll almost certainly get lots of information that people here don't want to waste their time repeating.

  • Autocomplete forms with Java

    I am looking for a way to autocomplete login forms(In a web browser, IE) with a Java program.
    Does anyone know of a method, or if this is possible with Java? What about JNI?

    I think you cannot do that very simple because autocomplete it is made on the client..and you don;t have access there only with (javascript, applets...activex)
    Or you can use cookies to identify the client and ajax to complete login form with the password...
    anyway I don;t think it is a good approach to autocomplete login forms.

  • Java 7u45 gives spurious warning about missing Permissions attribute

    The security dialog in 7u45 gives a yellow warning about missing Permissions attribute.   Does anyone know how to get rid of it?
    Same as the yellow box in the screenshots (#2 and #3) documented here (although none of them discuss the Permissions attribute) :
    What should I do when I see a security prompt from Java?
    The MANIFEST.MF file for the app definitely contains this attribute.  There's only one jar for the application, and it's signed.
    Might this be another security dialog bug?  Or am I missing something?  The JNLP contains the same "all-permissions" security tag.
    I also found the release notes for 7u45 mention a couple of cases where the dialog might still appear
    (see last issue: Java™ SE Development Kit 7 Update 45 Release Notes)
    I don't use the JNLPDownloadServlet but my own. I didn't model it on the JNLPDownloadServlet, but guess I could have partly the same issue since I use versioning.
    My jar doesn't fail to download though, it's just that its displaying this warning.
    MANIFEST.MF:
    Manifest-Version: 1.0
    Implementation-Title: My app
    Implementation-Version: 3.0-SNAPSHOT
    Built-By: me
    Application-Name: Myapp
    Created-By: Apache Maven 3.0.5
    Ant-Version: Apache Ant 1.8.2
    Trusted-Library: true
    Implementation-Vendor-Id: org.me
    Trusted-Only: true
    Build-Jdk: 1.7.0_45
    Permissions: all-permissions
    Specification-Title: my-client
    Specification-Version: 3.0-SNAPSHOT
    Archiver-Version: Plexus Archiver
    Codebase: *.me.org

    I went the Java version detection applet and I don't get a warning about the applet being blocked in the future.
    https://java.com/en/download/installed.jsp
    https://java.com/en/download/installed.jsp
    I dug the jar for the applet out of my Java cache and it contains Manifest.MF with the following contents:
    Manifest-Version: 1.0
    Codebase: www.java.com java.com
    Created-By: 1.7.0_25 (Oracle Corporation)
    Permissions: all-permissions
    Application-Library-Allowable-Codebase: www.java.com java.com
    Application-Name: Java Detection
    Name: JNLP-INF/APPLICATION.JNLP
    SHA1-Digest: jPquHTBq5R8txQLe5/T20x70Y7w=
    Name: JavaDetection.class
    SHA1-Digest: kQNVjPC5Yym1DszdpX1D2EH8Ll0=
    The jar contains one Java class and a signed JNLP-INF/APPLICATION.JNLP file that looks like this:
    <?xml version="1.0" encoding="UTF-8"?>
    <jnlp codebase="https://java.com/en/download/" href="JavaDetection_applet.jnlp" spec="1.0+">
        <information>
            <title>Java Detection</title>
            <vendor>Oracle Inc.</vendor>
        </information>
        <resources>
            <!-- Application Resources -->
      <j2se version="1.6+"/>
            <jar href="JavaDetection.jar" />
        </resources>
    <security>
      <all-permissions />
    </security>
        <applet-desc
             name="Java Detection Applet"
             main-class="JavaDetection"
             width="1"
             height="1">
         </applet-desc>
         <update check="background"/>
    </jnlp>
    They are running applet via JNLP:
    <applet code="JavaDetection.class" width="500" height="150"><param name="image" value="/im/download/verify_anim.gif"/><param name="centerimage" value="true"/><param name="boxborder" value="false"/><param name="jnlp_href" value="JavaDetection_applet.jnlp"/></applet>
    The JNLP file downloaded from here: https://java.com/en/download/JavaDetection_applet.jnlp matches the signed JNLP file in the jar (except for name).
    We are still working on getting our applications to not show the warning message but this appears to be an example of where the "you will be blocked in the future" message is not happening. We don't run our applications as applets so if anyone can find another working example that is a more traditional JNLP app, please post a link.

  • OER 11.1.1.7 - Asset Navigator doesn't open with an Error - Missing Required permissions attribute in main jar

    Hi,
    I have installed OER-11g version 11.1.1.7 and am successfuly able to open Asset Editor , ImpExp utility and also could harvest SOA and OSB components.
    Issue 1:
    However while trying to open the Navigator of the harvested components in OER console, a new window opens with two sections ( top and bottom). The top one which is a diagram view doesn't open with an error - Missing required permissions attribute in main jar: http://localhost:7101/oer-web/applets/components.aler-thinkmapclient-11.1.1.7.0.jar.
    Please find the screenshot below.
    Issue #2 : While trying to browse for the Assets from OER console. The below error is seen ( missing permissions for components.jexplorer-11.1.1.7.0.jar)
    Could someone direct me on how to solve this issue. Appreciate your help !
    Thanks and regards,
    Sridhar.

    It works for me after I did a small tweak by as mine is a demo install.
    Idea - is to make an security exception for the OER url in Java control console
    Steps to do that :
    1.Go to the control panel and uninstall the 64 bit version of Java
    Open Programs and Features and select the 64 bit version of Java and select Uninstall.
    2.Open up the Java Control Panel
    Found as an option in the standard windows control panel
    3.Check the version by clicking on the About Tab
    If this is not what you expected you can go to java.com and download the latest version.
    4.Click on the Security Tab in the Java Control Panel
    5.Click on the Edit Site List button in the lower RH corner of the control panel
    6.Add your URL to be allowed
    Enter the full path that you use to access this such as https://myequallogics.com or the IP address if that is how you access it (as in http://192.168.0.100 - Https is recommended by Oracle.) Once complete hit OK. You should now see the exception on the security page.
    7.Close out of the control panel.
    8.You can now acess your site through the browser window.
    Thanks to Java error: Missing required Permissions manifest attribute in main jar - Spiceworks for letting me know this.
    regards,
    Sridhar

  • Java 7 u45 gives yellow warning about a missing Permissions attribute that is not missing

    Hi!
    I have a Swing application distributed with Java WebStart. Since update 45 I can't get rid of the yellow warning about a missing permissions attrribute. I have reduced the JNLP to only reference a single signed jar that has the following manifest:
    Manifest-Version: 1.0
    Implementation-Vendor: Gunnar Grim
    Ant-Version: Apache Ant 1.9.1
    Implementation-Title: DOI Studio
    Implementation-Version: 5.2.5.1310201149
    Specification-Vendor: Gunnar Grim
    Application-Name: DOI Studio
    Permissions: all-permissions
    Specification-Title: DOI Studio
    Created-By: 1.7.0_45-b18 (Oracle Corporation)
    Specification-Version: 5.2.5
    Codebase: *
    Name: ....
    SHA-256-Digest: ...
    Clearly, both Permissions and Codebase are there. Still I get the warning. Anyone knows if this is bug in Java WebStart?
    TIA,
    Gunnar

    Are you signing your app with a 3rd party codesigning certificate ? Self-signing wont work anymore.

  • .jar file only works with 'java -jar'

    I have a .jar file that contains an installer. When I double click it nothing happens on my work computer (vista32). I have tried moving it to my home computer (vista64 and winXP) there it works fine when I double-click it.
    I have found a temporary solution for the work/vista32 machine. If I run it with:
    java -jar installer.jar
    it works. I have put this in the target of a shortcut to the file. But why do I need to do that manually when it works fine on my other machine by just double clicking the file?

    fedevaps wrote:
    Thing is that if I move this jar to another machine it works fine! The thing is that you are missing the point.
    It has nothing to do with the jar. Nor really java.
    Double clicking works because the OS (windows not java) understands what to do when you double click.
    If the OS (windows not java and definitely not the jar) does not understand then it doesn't work.
    So there are two independent parts.
    1. Create an executable jar.
    2. Create the correct association in windows.
    If you use the command line then you can absolutely verify that the first works. If it works then it means, absolutely (no other possibility) that if double clicking fails then the association, not the jar, is wrong.
    If it doesn't work then it means absolutely (no other possibility) that the jar, not the association, is wrong.

  • Launching classes with java -jar option

    hi all,
    i have read how to launch a class using the -jar option.
    Now i have one additional question.
    Suppose that the class that i want to launch contains packages from other jar files.
    Can i pack all the other jar files in the same jar, and have the code run by simply calling
    java -jar MyClass?
    if different jar packages are in the same jar file, can the main class that i want to launch see them?? or do i still
    have to specify the -cp option??
    thanx in advance and regars
    marco

    I don't know about having jar files in a jar file, but if you have class files in a jar file, you can make it so you just have to run it as
    java -jar MyJar.jar
    To make the jar file, you need to add an attribute to the manifest file. Make a text file and call it whatever you want, e.g. manifest.mf or manifest.txt.
    Add this line to it:
    Main-Class: MyMain
    if MyMain is your class with the main method. If MyMain is in a package, then you need to add that too, e.g. mypackage.MyMain.
    Now create your jar file as
    jar cfm MyJar.jar manifest.mf *.class
    After manifest.mf you add all the classes you have with spaces to separate them, or use wildcards.

  • Running with java -jar

    I have a client.jar that has a bunch of vm parameters and relies on a few other jars. The jar has the main class specified in the manifest. Ultimately I would like to take the dependent jars and put them in the client jar and use the manifest classpath option. I have been unable to get this to work. What I am finding is that running with java -jar basically ignores all of my vm parameters. I have tried removing the dependent jars and referencing them from the command line classpath argument. This still did not work. The only thing that has worked is not using a client.jar at all and just running my main class with all the vm parameters. This is not an acceptable solution for me. Thoughts?
    Thanks,
    Howard

    Yes, this is what is so weird about the problem. Neither the manifest class-path option or running with cp is working when the main class lives in a jar.

  • Warnings about merging java classes

    Hey Guys,
    While watching the logs on the sun portal server, I am noticing there are a lot of warnings about merging java.math.BigDecimal, java.math.BigInteger and com.sun.rave.web.ui.Time:
    [#|2007-03-12T09:48:22.948+1000|WARNING|sun-appserver-ee8.1_02|org.apache.commons.digester.Digester|_ThreadID=10;|[ConverterRule]{faces-config/converter} Merge(null,java.math.BigDecimal)|#]
    [#|2007-03-12T09:48:22.912+1000|WARNING|sun-appserver-ee8.1_02|org.apache.commons.digester.Digester|_ThreadID=10;|[ComponentRule]{faces-config/component} Merge(com.sun.rave.web.ui.Time)|#]
    [#|2007-03-12T09:48:27.875+1000|WARNING|sun-appserver-ee8.1_02|org.apache.commons.digester.Digester|_ThreadID=10;|[ConverterRule]{faces-config/converter} Merge(null,java.math.BigInteger)|#]
    What i would like to know is, how do i fix these warnings?
    Thanks in advance.

    You can also use Castor: http://www.castor.org
    It generates classes from XML Schemas and enables data
    binding without writing any line of a fuckin SAX
    parser :-)I evaluated Castor and JAXB and while JAXB isn't perfect, it's got some things over Castor. Castor almost looks abandonded when I go to the site. The documentation just sort of trails off.

  • Can't find xml within jar with java webstart

    I use Jasper Reports,I am reading a xml file in my application.
    The code I use to read this xml file is:
    JasperCompileManager.compileReportToFile("xmlfile.xml","jasperfile.jasper");
    When I run this code in JBuilder it run fine.
    But when I compile the classes and this xml to my jar file,sign it and then try to run it in java Webstart.It tells me that it can not find the path.
    What is wrong?

    I don't know Jasper Reports, so I may be wrong here.
    A file inside a .jar file is not a file on the filesystem, and cannot be accessed with java.io file-related classes. You should use ClassLoader.getResource() to get an inputstream reading from it.

  • Should I be concerned with the recent news about Java on my mac

    Have been hearing all the news about the concerns with Java from Homeland Security and that users should disable from their computers temporarily.  I am by no means a techie, however I see that Mac uses Java applet.  Is this something I should look at temporrily disabling from my Mac?  I wasn't sure how to proceed.  Can some one give some advise and in layman terms.......

    Java is only a potential problem if you have it installed and enabled in your Internet browser. Safari has had it disabled as the default for a while now.
    To check to make sure it is disabled in your browser. Open Safari->Preferences->Security and make sure Enable Java is not checked
    Note: Java and JavaScript are two different languages and are not to be confused. JavaScript is fine to have enabled.
    regards

Maybe you are looking for