Codebase attribute error messages when loading webstart application

Question

I have a webstart application in which all banks are signed (my own and third-party). When you download it using Java7u25, in the Java console I see error messages like the following:

Missing Permissions manifest attribute for: http://example.com/webstart/application-jars/commons-beanutils-1.8.3.jar Missing Codebase manifest attribute for: http://example.com/webstart/application-jars/commons-beanutils-1.8.3.jar 

I read about the changes in 7u25 here: http://blog.eisele.net/2013/06/java-se-7-update-25-release-notes.html

The note indicates the Codebase attribute in the JAR manifest at build time and maps it to Codebase in the JNLP file. How should this be configured to work on third-party jars, such as commons-beanutils, which obviously do not have this manifest?

Answer 1

If you sign the jar files yourself (third-party, as well as your own), you can simply add the necessary parameters to the third-party banks of manifest.mf (open them using the archive utility, that is, the archive manager on ubuntu or try 7-zip, etc. For Windows) add parameters as in your own jars manifest (repack them, on ubuntu it will happen automatically when you close the file after editing, I'm not sure that you are on windows) and then create an application / sign all banks.

This worked for me, although I'm sure there is a better way to do this.

Answer 2

If you cannot subscribe, see also this answer to add an exception to the application site.