id	summary	reporter	owner	description	type	status	priority	milestone	component	version	resolution	keywords	cc
11331	Generating jar file for tests with Java Web Start	wiktorn	team	"To debug #11298 I'd like to check, how JOSM behaves when started by Java Web Start:

1. I create josm-custom.jar using ant dist
2. I put jnlp (attached) and jar file in c:\josm
3. When I start jnlp, I get following exception
{{{
com.sun.deploy.net.JARSigningException: Found unsigned entry in resource: file:/c|/josm/josm-custom.jar
}}}
4. So I try to sign the jar. Fist I generate the key for signature (with a little help from http://docs.oracle.com/cd/E19798-01/821-1751/ghlgv/index.html):

{{{""c:\Program Files\Java\jdk1.7.0_76\bin\keytool.exe"" -genkey -alias signature -keyalg RSA -keystore josm.jks}}}

5. Then I sign the jar using the command:
{{{""c:\Program Files\Java\jdk1.7.0_76\bin\jarsigner.exe"" -keystore josm.jks -verbose josm-custom.jar signature
(...)

jar signed.

Warning:
The signer certificate will expire within six months.
No -tsa or -tsacert is provided and this jar is not timestamped. Without a timestamp, users may not be able to validate this jar after the signer certificate's expiration date (2015-07-09) or after any future revocation date.}}}

6. I start Java Web Start again, and then I get ""Application blocked by Java Security""

[[Image(apllication blocked.png)]]

7. Adding file:/// as exception in Java Configuration Security Panel doesn't help. When I host the jar on remote http:// url, it also doesn't help

"	defect	closed	normal		Core Webstart		wontfix		bastiK