users@jaxb.java.net

Re: progress + problems with using JAXB over webstart

From: Ed Mooney <Ed.Mooney_at_Sun.COM>
Date: Mon, 26 Jan 2004 10:25:35 -0500

Hi Andrew,

Ah, thank you.

I've filed Bug 4983469, "relaxngDatatype not signed".

Your workaround is the logical one, but I agree there's a licensing
issue. I'll inquire around to see if there's a remedy.

Regards,
-- 
Ed Mooney         |Sun Microsystems, Inc.|Time flies like
Java Web Services |UBUR02-201            |an arrow, but
Ed.Mooney_at_Sun.COM |1 Network Drive       |fruit flies like
781-442-0459      |Burlington, MA  01803 |a banana. Groucho
Andrew.Ferguson_at_arm.com wrote:
> hi Ed,
> 
> 
>>First, does your application require permissions not granted by the
>>default sandbox?
> 
> 
> yes - the application needs harddisk write access, and network access (over
> RMI) to a server other than the serving webserver
> 
> 
>>Second, are you still trying to sign the signed jars? We signed them to
>>obviate the need for users to do that, so would be interested in your
>>motivation in wanting to do so.
> 
> 
> I'm not trying to sign the jaxb jars anymore (I briefly was when I found
> you couldn't describe a list of jars in a jnlp file that were signed by
> different people - but read the lopica FAQ* and now have a separate
> jaxb.jnlp file which describes only the jaxb jars)
> 
> So in summary, I have two jnlp files
> 
>       myApp.jnlp
>             - this lists jars that we've produced and signed as resources
>             - links to jaxb.jnlp
>       jaxb.jnlp
>             - describes jaxb jars
> 
> and the current workaround is to change this to
> 
>       myApp.jnlp
>             - this lists jars that we've produced and signed as resources
>             - also in the list is a home-brewed (unzipped, jarred and
> signed with our keystore) relaxngDatatype**
>             - links to jaxb.jnlp
>       jaxb.jnlp
>             - describes jaxb jars
>             - minus original relaxngDatatype.jar
> 
> thanks,
> Andrew
> * http://lopica.sourceforge.net/faq.html#sign-third-party-jars
> ** this is only for internal testing (expect we are not licensed to
> distribute the home-brewed version..)
> 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe_at_jaxb.dev.java.net
> For additional commands, e-mail: users-help_at_jaxb.dev.java.net
> 
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe_at_jaxb.dev.java.net
For additional commands, e-mail: users-help_at_jaxb.dev.java.net