Java Web Start and Security

Question

It was simply pointed out that the Java Web Start applications from my blog, for example Key Bindings , no longer work due to the following security error:

After some investigation, I determined that security was improved in JDK7 and that the default value found in Security Tabfor Java Control Panelfound on Windows Control Panelis set to Highwhich prevents the application from running. If you change this setting to Medium, you will have the choice to accept the application and it will be launched. I assume that most people will not want to do this, so it seems to me that I need sign my jar file.

The problem is that I really don't understand the whole signing process.

.jar , :

jar cfev KeyBindings.jar KeyBindings KeyBindings*.class

.jnlp :

<?xml version="1.0" encoding="utf-8"?>
<!-- JNLP File for KeyBindings -->

<jnlp spec="1.0+"
    codebase="http://www.camick.com/java/webstart/"
    href="KeyBindings.jnlp">
    <information>
        <title>KeyBindings Application</title>
        <vendor>Tips4Java</vendor>
        <homepage href="http://tips4java.wordpress.com/"/>
        <description>KeyBindings Application</description>
        <description kind="short">Display the Key Bindings of Swing components</description>
        <offline-allowed/>
    </information>
    <resources>
        <j2se version="1.6+"/>
        <jar href="KeyBindings.jar"/>
    </resources>
    <application-desc main-class="KeyBindings"/>
</jnlp>

.jar .jnlp , Web Start HTML:

<a href="http://www.camick.com/java/webstart/KeyBindings.jnlp">...</a> - Using Java Web Start (JRE 6 required)

- , ( , ).

IDE Java Web Start. Eclipse, . Eclipse .jar ?

Update:

, . , .jar . , -, SSL, .jar , -.

, .jars, , .

.

Answer 1

(CA).

(Digicert, Thawte, Verisign ..)

CA , jar.

Digicert:

Java - Java-

Answer 2

Swing . SHA1 fingerprint , JAR, . Subway .