Different signded jar in the same web start app

Question

Hi there
I have a web start application that use an external security provider. The jar file of the security provider is signed (otherwise it don't run under jdk 1.4.1) and the jar with my application is also signed with other signature, because i need full rights on the client. It is not possible to start the application, because webstart not allows to start the app with jars signed from different certificates.
Anyone have an idea how this problem can be fixed?

Answer 1

I'm pretty sure this has been answered here before, so you may want to do a search to get a more complete answer. Basically, you need to sign the other JAR files with different certificates in a separate resource extension jnlp file, something like:
<extension name="Java Help" href="help.jnlp"/>
and then list the other jars in that file, something like:
<?xml encoding="UTF-8"?>
<jnlp spec="1.0+" href="help.jnlp">
<information>
<title>JavaHelp</title>
<vendor>Sun Microsystems, Inc </vendor>
</information>
<resources>
<jar href="jh.jar" />
</resources>
<security>
<all-permissions />
</security>
<component-desc/>
</jnlp>