Bug ID: 6846531 REGRESSION application from ocie.net does not work with 6.0

6846531 : REGRESSION application from ocie.net does not work with 6.0_14

Details

Type:	Bug	Submit Date:	2009-05-29
Status:	Closed	Updated Date:	2010-11-04
Project Name:	JDK	Resolved Date:	2009-06-17
Component:	deploy	OS:	windows_vista,windows_xp
Sub-Component:	webstart	CPU:	x86
Priority:	P2
Resolution:	Fixed
Affected Versions:	6u14
Fixed Versions:	6u15

Related Reports

Backport:	JDK-2198764 - REGRESSION application from ocie.net does not work with 6.0_14
Duplicate:	JDK-6886439 - Different Jars signed with tsa (Timestamping Authority) doesn't work with JNLP
Relates:	JDK-6869244 - REGRESSION: NoClassDefFoundError exception throws with signed apps

Sub Tasks

Description

J2SE Version (please include all output from java -version flag):

java version "1.6.0_14"
Java(TM) SE Runtime Environment (build 1.6.0_14-b08)
Java HotSpot(TM) Client VM (build 14.0-b16, mixed mode, sharing)

Does this problem occur on J2SE 1.4.x or 5.0.x ?  Yes / No (pick one)

Works fine in JDK 6.0_13


Operating System Configuration Information (be specific):
Windows Vista Business SP1

Hardware Configuration Information (be specific):
HP Pavillion dv9000
Windows Vista Business SP1 32 bit
3 GB RAM
Intel Core 2 Duo T9300



Bug Description:
Unsigned applications do not work with JDK 6.0_14.
Even though this is a valid webapp, I get an error.  This link works for update 13 and prior.

Reading certificates from 194224 https://www.ocie.net/JViewer/lib/dsi/clientC.jar | C:\Users\mac\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6\a80db86-525ee63f.idx
Reading certificates from 24964 https://www.ocie.net/JViewer/lib/other/commons-httpclient.jar | C:\Users\mac\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\1a4fffc1-4b20f693.idx
#### Java Web Start Error:
#### JAR resources in JNLP file are not signed by same certificate


Goto https://www.ocie.net/JViewer/jnlp/viewer.jnlp

The above link will work on update 13 and before.  This will not work on update 14.  




Steps to Reproduce (be specific):

Comments

EVALUATION

This is a bug in our JRE 6u14, it should be fixed it JRE 6u15.

Basically we compare a CodeSigner object in 6u14, which is incorrect. the CodeSigner object include CertPath and TimeStamp object, we should only compare CertPath object because the TimeStamp object may vary but if they are in valid period, it should be still good.

2009-06-02

EVALUATION

The application at  https://www.ocie.net/JViewer/jnlp/viewer.jnlp
 requests all-permission, so I am changing Synopsis fo`rom "unsigned apps do not work with 1.6.0_14" to "application from ocie.net does not work with 6.0_14".
Still remains to be investigated why this app proportedly works with 6u13 and not 6u14.

2009-06-01

SELECT A COUNTRY/REGION
Africa Operation Argentina Australia Austria Bahrain Bangladesh Belgium & Luxembourg Belize Bhutan Bolivia Bosnia & Herzegovina Brasil Brunei Bulgaria Cambodia Canada - English Canada - French Chile China Colombia	Costa Rica Croatia Cyprus Czech Republic Denmark Ecuador Egypt Estonia Finland France Germany Greece Guatemala Honduras Hong Kong Hungary India Indonesia Iraq Ireland	Israel Italy Japan Jordan Kazakhstan Korea Kuwait Laos Latvia Lebanon Lithuania Malaysia Maldives Malta Mexico Moldova Nepal Netherlands New Zealand Nicaragua	Norway Oman Pakistan Panama Paraguay Peru Philippines Poland Portugal Puerto Rico Qatar Romania Russia Saudi Arabia Serbia & Montenegro Singapore Slovakia Slovenia South Africa Spain	Sri Lanka Sweden Switzerland -- French Switzerland -- German Taiwan Thailand Turkey Ukraine United Arab Emirates United Kingdom United States Uruguay Venezuela Vietnam Yemen

Hardware and Software, Engineered to Work Together