JAVA Update 19 :-(

Questions, answers, tips and ideas on Servoy Client

JAVA Update 19 :-(

Postby martinh » Wed Mar 31, 2010 10:47 am

Hi,

After installing JAVA update 19 on the client (server still works on update 17), during smart client startup, the following screen occurs and it hangs:

java update 19.JPG
java update 19.JPG (34.16 KiB) Viewed 12764 times


Yes/No buttons do not work.

I cleaned both JAVA cache and .servoy directory.

Anyone knows how to solve this?

Martin
Martin
------------------------------------------------
Servoy Developer
Version 5.2.10/5.2.13
Java version 1.6 update 31
Database SQL Server 2008 R2
martinh
 
Posts: 857
Joined: Wed May 09, 2007 5:34 pm
Location: Belgium

Re: JAVA Update 19 :-(

Postby mboegem » Wed Mar 31, 2010 11:00 am

Hi Martin,

we have problems with v19 as well.
Have to find out what the problem is, seems to be 1 or more plugins.

Meanwhile I've sent a warning out to all our clients NOT to update... :-(
_____________________
Marc Boegem
Solutiative / JBS Group, Partner
• Servoy Certified Developer
• Servoy Valued Professional
• Freelance SAN Developer

Image
User avatar
mboegem
 
Posts: 1469
Joined: Sun Oct 14, 2007 1:34 pm
Location: Hoofddorp, The Netherlands

Re: JAVA Update 19 :-(

Postby martinh » Wed Mar 31, 2010 11:17 am

Hi Marc,

I'm glad that you confirmed that you have problems as well.
I also send a message to all my customers not to update.

Now we can only wait until there is a solution (from JAVA or from Servoy)

Martin
Martin
------------------------------------------------
Servoy Developer
Version 5.2.10/5.2.13
Java version 1.6 update 31
Database SQL Server 2008 R2
martinh
 
Posts: 857
Joined: Wed May 09, 2007 5:34 pm
Location: Belgium

Re: JAVA Update 19 :-(

Postby IT2Be » Wed Mar 31, 2010 12:30 pm

This is what I noticed:

It looks like this is a security (possibly signing) issue when loading components.

1. At first I saw an error reported on one of our Beans.
2. When I removed all our beans the error was reported on the 'swingbeans.jar'.
3. After removing 'swingbeans.jar' (not a Servoy library as far as I know) the security warning popped up as reported by Martin and I could also not remove the dialog anymore.
4. After removing all our plugins from the plugins folder the error dialog popped up again.

It looks like Java is going to be very strict (and beyond) about signing beans if I am correct.
Strange event though is that when loading a non-secure Bean (in Java eyes) is loaded JWS reports nicely.
When a plugin is loaded JWS freezes.

The above makes it hard to analyze what really goes on.
Is it the absence of a signature (could be the case for some beans/plugins) or the fact that the signature differs from that of Servoy (some of the plugins are signed with our own signature) or is this something else.

Edit: ook de demo site van Servoy geeft een foutmelding (zie punt 2) als een smart client opgestart wordt..
Marcel J.G. Trapman (IT2BE)
SAN partner - Freelance Java and Servoy
Servoy Components - IT2BE Plug-ins and Beans for Servoy
ServoyForge - Open Source Components for Servoy
User avatar
IT2Be
Servoy Expert
 
Posts: 4766
Joined: Tue Oct 14, 2003 7:09 pm
Location: Germany

Re: JAVA Update 19 :-(

Postby IT2Be » Wed Mar 31, 2010 1:19 pm

Found the below here: http://java.sun.com/javase/6/webnotes/6u19.html

Ensuring Application and Applet Security when Mixing Signed and Unsigned Code
Signed Java Web Start applications and applets that contain signed and unsigned components could potentially be unsafe unless the mixed code was intended by the application vendor. As of this release, when mixed code is detected in a program, a warning dialog is raised. Mixing Signed and Unsigned Code explains this warning dialog and options that the user, system administrator, developer, and deployer have to manage it.

So, basically this is ok but...

- for beans there is no dialog!
- for plugins the dialog freezes!

Nice stuff...
Marcel J.G. Trapman (IT2BE)
SAN partner - Freelance Java and Servoy
Servoy Components - IT2BE Plug-ins and Beans for Servoy
ServoyForge - Open Source Components for Servoy
User avatar
IT2Be
Servoy Expert
 
Posts: 4766
Joined: Tue Oct 14, 2003 7:09 pm
Location: Germany

Re: JAVA Update 19 :-(

Postby Harjo » Wed Mar 31, 2010 1:23 pm

We have the same issues!!
All customers that have updated there java to this version, could not log in anymore into our Servoy solution.
First we thought it had something todo with the calendarbean of IT2BE, but even the standard demo solution of Servoy itself at: demo.servoy.com does not work!! :-(

I hope Servoy could take a look at this. (also for Servoy 3.5?)
Harjo Kompagnie
Direct ICT / Servoy Hosting / ServoyCamp
Servoy Certified Developer
Servoy Valued Professional
SAN Developer
User avatar
Harjo
 
Posts: 4296
Joined: Fri Apr 25, 2003 11:42 pm
Location: DEN HAM OV, The Netherlands

Re: JAVA Update 19 :-(

Postby pbakker » Wed Mar 31, 2010 1:32 pm

This is being looked into as I write. will post updates here when more information is available.

Paul
pbakker
 
Posts: 2821
Joined: Wed Oct 01, 2003 8:12 pm
Location: Amsterdam, the Netherlands

Re: JAVA Update 19 :-(

Postby jcompagner » Wed Mar 31, 2010 2:19 pm

The problem seems 2 fold:
-First a problem downloading the swingbeans.jar from the server (some get a download error now even before the security dialog)
Workarround: Removed swingbeans.jar from the server.

-Second the dialog that SUN that shows to enduser has a problem in with modality
Workarround: Go to the enduser JavaControl panel and in the advanced tab under security > mixed code > disable the verification.
See also: http://java.sun.com/javase/6/docs/techn ... usted_only
Johan Compagner
Servoy
User avatar
jcompagner
 
Posts: 8142
Joined: Tue May 27, 2003 7:26 pm
Location: The Internet

Re: JAVA Update 19 :-(

Postby Harjo » Wed Mar 31, 2010 2:29 pm

JOhan,

we have it also, on the beans of IT2BE (calendar in this case)
we can't remove those, because than our solution is not working anymore....
Harjo Kompagnie
Direct ICT / Servoy Hosting / ServoyCamp
Servoy Certified Developer
Servoy Valued Professional
SAN Developer
User avatar
Harjo
 
Posts: 4296
Joined: Fri Apr 25, 2003 11:42 pm
Location: DEN HAM OV, The Netherlands

Re: JAVA Update 19 :-(

Postby Jan Blok » Wed Mar 31, 2010 2:29 pm

Remove of swingbeans.jar is possible on the server since this is just a list of available java swing beans, only used by servoy developer.
Jan Blok
Servoy
Jan Blok
 
Posts: 2684
Joined: Mon Jun 23, 2003 11:15 am
Location: Amsterdam

Re: JAVA Update 19 :-(

Postby pbakker » Wed Mar 31, 2010 2:46 pm

In addition to what Johan already said in the previous post:

Sun/Oracle has pushed a change into update 19 of Java 6 that, in our opinion should have been reserved for a major update (Java 7).

The change in update 19 doesn't take into account scenario's Java WebStart scenario's like Servoy's (and many, many other software vendors that use Java WebStart) that use libraries, both signed and unsigned and that can be extended with additional libraries of 3rd parties (beans, plugins etc).

This change has broken many Java WebStart implementations, including ours.

The workarounds for now are:
- Removal of the /application_server/beans/swingbeans.jar
- Make sure your customers do not upgrade to Java 6 update 19
- If your customer(s) have already upgraded to Java 6 update 19, the best option would be to downgrade or activate a previous version on Java on their client machines.
- If they have upgraded and cannot downgrade, they can disable "verification" under Advanced tab > security > "mixed mode" in the Java Control Panel on the client machine(s) , see:
http://java.sun.com/javase/6/docs/technotes/guides/jweb/mixed_code.html#jcp.

Our effort will continue to provide you with a structural solution asap.

Paul
pbakker
 
Posts: 2821
Joined: Wed Oct 01, 2003 8:12 pm
Location: Amsterdam, the Netherlands

Re: JAVA Update 19 :-(

Postby mboegem » Wed Mar 31, 2010 3:04 pm

pbakker wrote:- If they have upgraded and cannot downgrade, they can disable "verification" under Advanced tab > security > "mixed mode" in the Java Control Panel on the client machine(s) , see:
http://java.sun.com/javase/6/docs/techn ... e.html#jcp.


This might work for 'beanless' solutions. ('beanless' in terms of no 3rd party beans)
But after removing the 'swingbeans.jar' it's still impossible to startup as we use the 'calendar bean' + more.

pbakker wrote:Our effort will continue to provide you with a structural solution asap.

I trust Servoy in finding a great solution!(as always) :)

For 'new-to-java' customers: they can not downgrade, but the can download a previous stable version (17) from: https://cds.sun.com/is-bin/INTERSHOP.enfinity/WFS/CDS-CDS_Developer-Site/en_US/-/USD/ViewProductDetail-Start?ProductRef=jre-6u17-oth-JPR@CDS-CDS_Developer
_____________________
Marc Boegem
Solutiative / JBS Group, Partner
• Servoy Certified Developer
• Servoy Valued Professional
• Freelance SAN Developer

Image
User avatar
mboegem
 
Posts: 1469
Joined: Sun Oct 14, 2007 1:34 pm
Location: Hoofddorp, The Netherlands

Re: JAVA Update 19 :-(

Postby Stef » Wed Mar 31, 2010 3:27 pm

We only have IT2be's Outlook plugin running... is that a problem?

THX
Stef
Stef
 
Posts: 208
Joined: Wed May 28, 2003 2:19 pm
Location: Kasterlee, Belgium

Re: JAVA Update 19 :-(

Postby IT2Be » Wed Mar 31, 2010 3:56 pm

Stef wrote:We only have IT2be's Outlook plugin running... is that a problem?
Hold it here...
Before we get the blame for this, it is this version of Java that does not work as advertised!

As far as I have seen there are more libraries that can cause issues since they are either unsigned or signed with a different signature.
Marcel J.G. Trapman (IT2BE)
SAN partner - Freelance Java and Servoy
Servoy Components - IT2BE Plug-ins and Beans for Servoy
ServoyForge - Open Source Components for Servoy
User avatar
IT2Be
Servoy Expert
 
Posts: 4766
Joined: Tue Oct 14, 2003 7:09 pm
Location: Germany

Re: JAVA Update 19 :-(

Postby Stef » Wed Mar 31, 2010 3:59 pm

Marcel, I don't blame you at all!

Just tested, Outlook plugin is still working!

THX!
Stef
 
Posts: 208
Joined: Wed May 28, 2003 2:19 pm
Location: Kasterlee, Belgium

Next

Return to Servoy Client

Who is online

Users browsing this forum: No registered users and 2 guests