Java Card, Web Start and 2 certificates

I have a WebStart application that is required to use client certificates. These certificates come from a user's Smart Card that gets put into Internet Explorer. WebStart will automatically grab the certificate and send it to the server.
My problem comes when there are 2 certificates that fit the profile. In that case, a dialog pops up asking the user to pick 1. It comes up with just about every new connection made back to the server.
The way I see it, my options are:
1) Try to reuse connections, extend keep-alive so not too many connections are made.
2) Try to get the certificates from Internet Explorer manually and pass one of them with the connection
or
3) Read the certificate directly from the Card and pass it along.
I've been trying #1 for a while now, and it doesn't get too much better.
Any ideas?

I'll have to check. I'm not running the system, so I don't have any control over this.
If it is, should I grab it out of there?
I'm sorry, Java Card and certificate programming is new to me, so...
The code required to grab the certificate out of the Microsoft Certificate Store would be OS-dependent? If I grab the certificate directly off the card, would that be OS-independent?
Is this true?

Similar Messages

Mac OS 10.4.8 , Java Web Start and JRE version of 1.4.2 and 1.5.0 problem

Hello,
I've been searching internet and reading the problems related to Java Web Start and JNLP.
But no solution I read can solve what I faced.
I'm running Mac OS x 10.4.8 and Macintosh updates the Java in my machine so that it has Java version 1.4.2 and Java 1.5.0
The application I'm running needs to be running in JRE 1.4.2.
So I changed the Java Preferences so that the default Java setting is JRE 1.4.2. However, the JNLP application still running in Java 1.5.0
So I changed the MIME and make sure the JNLP is opened with Java Web start instead. The Java Web start is for version 1.4.2. I also change its preference so that the console is opened.
I tried to run the JNLP application once again. Java web start 1.4.2_09 starts and console open, but the Java Runtime is still showing Java 1.5.0
I adjust the JNLP file so that the version is only showing 1.4.2_09 (ignoring all other variables of version 1.4.1, 1.4.2, etc found in the original JNLP file). That didn't work either.
I search on methods on how to uninstall Java 1.5.0 in Mac - apple page told me that I can't do that unless I reinstall the whole OS.
I am henceforth declare that I am stuck now !!!! Heellllpp....

Are you up to date with the updates?
Update for Snow Leopard users:
Apple issued update 12 for Java for OS 10.6:
http://support.apple.com/kb/DL1573
Note: On systems that have not already installed Java for Mac OS X 10.6 update 9 or later, this update will configure web browsers to not automatically run Java applets. Java applets may be re-enabled by clicking the region labeled "Inactive plug-in" on a web page. If no applets have been run for an extended period of time, the Java web plug-in will deactivate.
If, after installing Java for OS X 2013-002 and the latest version of Java 7 from Oracle, you want to disable Java 7 and re-enable the Apple-provided Java SE 6 web plug-in and Web Start functionality, follow these steps:
http://support.apple.com/kb/HT5559?viewlocale=en_US
Further update:
Apple issued this Java related security update No. 13 on February 19:
http://support.apple.com/kb/HT5666
and Update No. 14 on March 4: http://support.apple.com/kb/DL1573
http://support.apple.com/kb/HT5677
The standard recommendation is for users to turn off Java except when they have to use it on known and trusted websites (like their bank). Javascript, which is unrelated despite the name, can be left on.

Java Web Start and DeployDirector: What's the difference?

I am the product manager for DeployDirector at Sitraka (now part of Quest Software). I'm NOT in sales; I'd simply like to provide you with some information.
From talking with DeployDirector users and evaluators, and from my own discussions with the folks at Sun, I have discovered that there is great deal of confusion about the difference between Java Web Start and DeployDirector. I'd like to clarify this by periodically posting some information about the two.
Though the products seem similar in concept, they are designed for different purposes. They both deploy, auto-update and manage the JRE for client-side Java applications, but beyond that, they are quite different.
Java Web Start is ideally designed for applications deployed over the Internet, where application-provider trust is an issue. Why? The security sandbox guarantees that application can do no harm. (There's some good information about Java Web Start and sandbox apps on ScheduleWorld at http://www.scheduleworld.com/itsYourLife.html) Web Start's architecture simply consists of a client piece that interprets a JNLP file. Because of the sandbox and its simplicity, I believe JWS is best used for independent software vendors, independent developers, etc.
Because DeployDirector is ideally designed for internal enterprise applications, it does not enforce the security sandbox. Trust is not an issue here, because internal users typically trust their internal IT group. DeployDirector's architecture consists of both a client and a server piece, which allows us to support more complex deployment and update scenarios (e.g., scheduled and optional updates) and applications management capabilities like rollback, reporting, exception monitoring, authentication/authorization out of the box. All of this is configured through the DeployDirector administration console.
In some situations, DeployDirector may be unnecessary overhead. In other situations, Java Web Start simply does not provide enough capability and building in this into Web Start can be difficult.
If you'd like more information, we have whitepapers and case studies (including one specifically about DeployDirector and JWS) available on our website at http://www.sitraka.com/software/deploydirector/
If you'd like to discuss some of these differences, or if you have questions about DeployDirector, feel free to email me directly. (Or post here, of course.)
Thanks,
Sonal Champsee
[email protected]

Hi Gerald,
Given what I know about your emnity towards DeployDirector (which is clearly illustrated in this thread: http://forum.java.sun.com/thread.jsp?thread=348061&forum=38&message=1446155 that was evidently a response to this article: http://www.javaworld.com/javaworld/jw-11-2002/jw-1122-autoupdate.html) I'm going to take a (pardon the expression) "don't feed the trolls" approach here.
I'm simply re-iterate that JNLP, and its implementations such as Web Start and OpenJNLP, are designed for a very different set of users that DeployDirector. The differences in functionality between the two products reflect that.
The enterprise has different requirements in a deployment mechanism for its internal, critical applications than software vendors and independant developers. DeployDirector addresses the requirements of the enterprise. Frankly, most of our recent customers only chose to buy the product after initially rejecting it and (unsucessfully) attempting to use JNLP and Web Start. Sometimes people only learn the hard way: different users have different requirements which are suited to different tools or technologies.
Sonal

Java Web Start and C++ executable

Can anyone please help me to deploy an application including three C++ executables using Java Web Start?
I packaged each .exe file into .jar and created a java program called "ExecTest" that attempt to launch the .exe by calling Runtime.exec (someapp.exe).
My JNLP file looks like:
<resources>
<jar href="app/someapp.jar"/>
<jar href="ExecTest.jar" />
</resources>
<application-desc main-class="ExecTest">
The problem I am having is that Runtime.exec wants the full absolute pathname for the executables. But the cached jar files all have some arbitrary letters prefixed, so I cannot specify them beforehand.
Any ideas?
Thanks in advance.
Suh from Toronto. (Go! Leafs Go!)

I've deployed serialio.com's replacement for javax.comm via Java Web Start, and I managed to package the .dll in a .jar without any difficulties.
Perhaps the System.loadLibrary() function knows about the renaming that Java Web Start does...
If so, then the following might do the trick:
- Use System.loadLibrary() to load your .exe file. Windows uses the same fileformat for DLLs and EXE files, and hence System.loadLibrary() should be a safe no-op. Presumably you are
- Use System.mapLibraryName() to find the full path to your .exe.
�yvind

Java Web Start and JNLP Problem

Hi !
I�m a student and i need your help for a work that i have to do.
I have an aplication that parse an XML file.
The XML file is in ther server, and when i run the aplication with Java Web
Start and jnlp file i want that the application parse a XML file.
is this possible??? how can i do ???
if you dont understand please warn me, that i try to explain better..
thanks, in advance.
Rui Silva , Portugal

I'm not sure that you need webstart.
Just an applet will allow you to read a file from the server:
Just open a URL pointing to the .xml file.
Read the file into a buffer and then parse it.
Now actually getting the applet to do something with the contents of the .xml file
is more complicated. Presumably you need to write something which understands the
contents of the .xml and does something in response to the contents.
A signed java program can be run from with in webstart which can spawn processes on
the local machine. os.systemExec("command a b c"); But of course that has cross platform
problems.
Good luck

Java Web Start and Java Preferences

I am having trouble with Java Web Start and Java Preferences. I have tried reinstalling the update with the link http://www.apple.com/downloads/macosx/apple/application_updates/javaformacosx105 update6.html but to no avail. What else can be done ? Moreover the file /System/Library/Frameworks/JavaVM.framework/Versions/A/ seems to be in place, but Java Web Start wont open and Java Preferences can't access cache files. Any ideas about how to resolve this? I have been having issues with Java for a long time and have already done a clean Leopard reinstall and all the Combo updates. Java Web Start and Java Preferences worked correctly for a while after that but seem to have gone haywire again.

bump

Java Web Start and pack200

Hi!
What do I have to do to deploy my jar-archives that are packed with pack200? Do I have to change the jnlp files? Do I have to change any server settings?
At the moment I successfully deploy our software using Java Web Start and simple jar files. If I pack with pack200 the archives shrink to 1/4 of the original size. That is nice, but when I put the xxx.jar.pack.gz files on our web server they are ignored by Java Web Start. Explicitly use the xxx.jar.pack.gz files in the jar arguments of the jnlp file doesn't work either (because JWS expects .jar archives there it tells me that the archives are corrupted).
I figure that I have to change either the jnlp file, the server settings or the JWS clients settings.
In another posting I have read that JWS in its normal configuration does not support pack200 at all. Is that correct? Or is there a straight-forward documentation how to use JWS with pack200?
Thanks in advance,
Chris,
Hamburg

Either the JWS plugin should try to request the "xxx.jar.pack.gz" file when it finds a "xxx.jar" reference in the jnlp file.No. You always request jar files, but the Accepted-Ecnoding can differ. If omitted or empty the server should send back the contents of the jar, if it's "gzip" than the stuff of the jar.gz (Content-Encoding: gzip) and if it "pack200-gzip" the stuff of the jar.pack.gz (Content-Encoding: pack200-gzip).
The diagrams shown here make it pretty obvious:
http://java.sun.com/j2se/1.5.0/docs/guide/deployment/deployment-guide/pack200.html
So... you need some server sided logic for handling that. If you can run servlets - great... just use Sun's example. If you can't, you'll need something else like apache's mod_rewrite and a php script.
mod_rewrite is used for redirecting requests server sided. For example:
http://onyx.bubblegumcrises.jp/jnlp/downloads/fake.jar [no real url]
becomes:
http://onyx.bubblegumcrises.jp/jnlp/jarbounce.php?file=fake.jar (internally) [no real url]
by rewriting like this(jnlp/.htaccess):
RewriteEngine On
RewriteBase /jnlp
RewriteRule downloads/(.*) jarbounce.php?file=$1 [NE]
The php file then checks the filename (for security reasons) and the accepted encoding and sends the contents of a file (picked by AE and availability) back together with the correct headers (Content-Encoding reflecting the picked encoding and Content-Type set to "application/x-java-archive").
I've written such a script yesterday and I'm going to make it public. However, I want to do some more checks before releasing it (I ended up here by googling around... I wanted to avoid reinventing the wheel again ;)).
I'll post it over at JGO pretty soon now... in this thread:
http://www.javagaming.org/cgi-bin/JGNetForums/YaBB.cgi?board=OnLin;action=display;num=1097590751;start=0
[I'm also planning to write an article about that, but that will take a bit longer]

Java 7 Web start fails to download Java 1.6 version

Sorry for the almost exact duplication of a previous thread, but that was closed (Java 7 Web start fails to download Java 1.6 version
When launching an application requiring Java 1.6 with a Java 1.7 web start it fails when it tries to download 1.6 with the following message:
"Unable to download http://javadl-esd.sun.com/update/1.6.0/1.6.0_29-b11.xml for installation"
Problem only seems to occur on Windows 7 (64 bit), seems fine on Windows XP.
Bug has been raised with Oracle by poster Matt Taylor - http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=7168311
Does anybody have any ideas?
Thanks,
Lee.

igor wrote:
Could you please collect and provide more info.
In particular:
0) Explain how exactly you launch JNLP when it does not work.We have a website with a link to a jnlp file. User clicks on the link the jnlp file downloads and installs.
"install the jnlp from the dos window" - do you mean run "javaws applicationURL"?Yes. But actually that only worked because we had already installed a Java 6 version.
When it does not work do you use Deployment Toolkit to embed link into web page?
1) screenshot of the errorHere are links to several screenshots of errors we get:
http://dl.waterford.org/pics/error_install.png
http://dl.waterford.org/pics/error2.png
http://dl.waterford.org/pics/error3.png
Here is a link to the error in the java webstart failure dialog (details):
http://dl.waterford.org/pics/errormsg.txt
2) Enable full trace details (see http://docs.oracle.com/javase/7/docs/webnotes/tsg/TSG-Desktop/html/plugin.html#gcexdf)
and post trace fileHere is a link to the java console with full trace details:
http://dl.waterford.org/pics/javaconsole.txt
3) Install WireShark and see what http requests are made. Please post all request/response pairshttp://dl.waterford.org/pics/packets.pcap
Edited by: 933472 on May 10, 2012 1:30 PM

Mac OSX 10.6.2 Java 6 Web Start not always version checking on launch

When launching a Swing app via Web Start on Snow Leopard, it will often fail to discover and download the new version. This feature works consistently with Java 6 on Linux and Windows PC's.
The web-start app is accessed using an Application Bundle created with the Java Preferences app. If I clear the cache in Java Preferences, Web Start will nicely download the application and run it. However, after deploying a new version of the app, the Mac client will often run the cached version of the app without downloading the new version. Is anyone else experiencing this problem?

Re: "Alternatively, if you don't want to do this, the only other option I am aware of to solve this problem is to buy software like Fusion or Parallels and install Leopard (10.5) as your OS and run MX 2004 within a virtual environment."
Just so this is perfectly clear..... NO CAN DO
I have VMWare and Parallels on a Brand New MacBook Pro. It came with 10.5.11 and that is absolutely the OLDEST Mac OS I can install in a virtual environment. Believe me, I tried Tiger, Panther and Jaguar to no avail.
If the Mac in question came loaded with Snow Leopard, it has a "Snow Leopard or better" firmware write on the logic board and it will not allow an older OS to be installed.... even in a virtual environment, unless there's a secret that nobody I've spoken to in support for both VM clients knows.

Updated link to Java Card Development Kit and related documentation

Note that the right link for Java Card Development Kit and related documentation is
http://www.oracle.com/technetwork/java/javame/javacard/download/index.html
It used to be
http://www.oracle.com/technetwork/java/javacard/downloads/index.html
which is still on-line, but the links there are dead and sometime to obsolete stuff.

If you don't have those directories, obviously, you don't have the source release with cryptographic extensions. You have a different release.
The version you downloaded isn't a source release but you still have the full kit.
For the src release, contact $un for a license.

Java Card Development Tool and Cards.

Hello all,
I'm thinking to purchase some Java Card Development Tools and Java Cards.
Could you guys recommend any?
Now I'm checking the Schlumberger's Cyberflex Access SDK. If I buy this, which card do I have to choose? 'Cyberflex Access Developer Card'?
Howabout Gemplus? Oberthur? or G&D? and anything else?
I look forward to hearing from you guys,
Thank you.
Julie.

A list of Java Card development tools is available at http://wireless.java.sun.com/allsoftware/index.html#jcardtools

Java Web Start and SSL

I have an AP designed as a Java Web Start program,
and I want it to connect to a web service via SSL.
I know how to do that in a normal AP. Just add a property like :
System.setProperty("javax.net.ssl.trustStore","my.keystore");
But since a JAWS program is downloaded from server, and don't have a my.keystore on local file system. I can't set a property that way. Is anyone know how to deal with this?
Can a signed jar file help?
Thanx in advance.

We had the same problem. There's basically two ways around this. One is extremely easy and the other is a pain.
easy: Use a CA certificate on the web server (Verisign, thawte etc.). All java applications already have a keystore (cacerts) that recognizes
these CAs. This keystore will be used when the cert on the server is a CA. Only drawback - $250 or so for the cert.
painful: Programmatically extract your personal certificate keystore from the deployed client jar. Also programmatically apply it to your SSL handler. Basically - you have to code what's done in a regular App simply by "javax.net.truststore=keyfile". I didn't explore this option
too much as the easy option was viable.

Java Web Start and Firefox

Hello!
I want to use some java web start applications, which are started directly by clicking a link. My browser (firefox) doesn't know the java web start mime type (*.jnlp). Because of that I can only download the specific JNLP-File instead of executing this file to start the java app.
There is no jnlp mime type in the firefox section Edit-->Preferences --> Application and I can't add a new mime type because there is no funkction to did that job.
I have installed the jre and the jdk package. In firefox Tools --> Addons there is the plugin "Java Plug-in 1.6.0_19" listed.
Has anybody an idea, who to add the jnlp mime type in firefox?
Thanks for help!
Best regards,
Flasher

Maybe this can help you.
And related link in Ubuntu Forum.

Java Web Start and Remote Scripting Incompatibility?

I recently installed the Java Web Start plugin to Internet Explorer, in order to run Sun's version of the Java Virtual Machine.
After the install, I am receiving errors when trying to run a web application that uses the Remote Scripting technology for client-server communication.
I think this might be related to the Java 2 security model, which requires all Java applets to be signed. The Remote Scripting client-side component seems to be unsigned, so that may be causing my problem.
Does anyone have a solution for this problem?
Any help is greatly appreciated.
Best Regards,
Nicole Roberts

Hi,
I had the same problem on a unix server!
The new build of IE on Windows 2003 from Microsoft that excludes the JVM (Java Virtual Machine), works fine with the JVM coming from Sun, except for the following.
We are experiencing problems, that if we are not logged in as Domain administrator, we get an Apache security prompt to log on, as soon as the RSProxy class is used. It seems that the Class is not picking up the current session, but tried to create another session, without a userid, and then prompts you for your login details.
We still cannot figure out, why it does not do it with the Domain Administrator account.
Can someone please have a look into this.
I think there is a simple configuration problem somewhere, that will allow seamless integration with Sun's JVM.
I could resolve it so far by loading the Microsoft JVM back into Win2k3 theough the Visual Studion 6 Cd's, but I don't like the idea of that!

Java Web Start and Policy File

Hi,
I've a problem for Java Web Start (JWS) in working with Policy File.
I like to apply a policy file for a JWS application to fine tune the secuirty setting instead of granting permission in JWS.
For an applet environment, I can apply policy file like this:
appletviewer -J"-Djava.security.policy=all.policy" writeFile.html
However, in JWS environment, I try to apply in JNLP file as below but fail:
<?xml version="1.0" encoding="UTF-8"?>
<jnlp spec="1.0+"
codebase="http://130.18.52.226:8080/testing/"
>
<information>
<title>JWS JFrame App</title>
<vendor>Java Developer Connection</vendor>
<homepage href="http://java.sun.com/jdc" />
<description>Demonstration of JNLP</description>
<icon href="hsbc.gif" width="32" height="32" />
</information>
<resources>
<j2se version="1.3*" />
<property name="java.security.manager" value="x" />
<property name="java.security.policy" value="testing.policy"/>
<jar href="testing.jar"/>
</resources>
<application-desc main-class="JWSJFrameApp" />
</jnlp>
The error message like this:
Java Web Start Console, started Tue Sep 03 09:59:36 CST 2002
Java 2 Runtime Environment: Version 1.3.0 by Sun Microsystems Inc.
java.security.AccessControlException: access denied (java.util.PropertyPermission java.security.manager write)
java.security.AccessControlException: access denied (java.util.PropertyPermission java.security.policy write)
Could anyone please help on this!
Many thanks!
Regards,
Simon Ho

There are two problems with what you are trying to do.
First, setting a property PROP=VALUE in the jnlp file does not mean that java will be launched -DPROP=VALUE, instead, javawebstart will call System.setProperty(PROP,VALUE) before your apps main() is called. The difference is, the property will not be set at the time the VM is initialized.
Second, the javaws security policy will not allow you to set arbitrary properties in an unsigned application. Only properties begining with "jnlp." or "javaws." (and possibly a few other specific props known to the native javaws code) can be set in an application unless <all-permissions> is specified and the app is signed.

Java Card, Web Start and 2 certificates

Similar Messages

Maybe you are looking for