JAR file manifest does not contain the Permissions attribute

Questions, answers, tips and ideas on Servoy Client

JAR file manifest does not contain the Permissions attribute

Postby SteveInLA » Mon Oct 28, 2013 7:08 pm

Since updating to Java 7 Update 45, my customers get a new yellow box in a Java security warning when launching the Smart Client. It says:
This application will be blocked in a future Java security update because the JAR file manifest does not contain the Permissions attribute. Please contact the Publisher for more information. More Information

Clicking 'More Information' gives the usual warning about the JNLP file not having an associated digital signature, but it also gives this warning in another yellow box:
Note to the Publisher: Security features to prevent unauthorized redistribution of your Java application will cause this application to be blocked in the future. See current Java documentation about JAR Manifest entries for the changes that need to be made. Note to users: For any questions, please contact the Publisher who provided you with this application.

My server is running Servoy 6.1.5, but this also occurs on my test server running Servoy 7.1.0. I am close to having my next version of solutions finished and had planned to upgrade the server to 7.3, but I haven't tested anything with 7.3 yet. Will that fix this problem?

Steve in L.A.
SteveInLA
 
Posts: 233
Joined: Thu Jul 29, 2004 12:00 am
Location: Southern Oregon, USA

Re: JAR file manifest does not contain the Permissions attri

Postby SteveInLA » Mon Oct 28, 2013 8:20 pm

Upgrading the Servoy server to 7.3 does not fix this problem. My next guess is to remove my third-party beans and plugins to see if that changes anything.

Java console displays the following on solution startup:
Missing Application-Name: manifest attribute for: http://localhost:8181/lib/j2db.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/lib/js.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/lib/commons-logging.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/lib/rmitnl.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/lafs/kunststoff.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/plugins/agent.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/plugins/amortization.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/plugins/converters.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/plugins/default_validators.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/plugins/dialog.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/plugins/excelxport.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/plugins/file.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/plugins/frameworksBusy.jar
Missing Permissions manifest attribute for: http://localhost:8181/plugins/frameworksBusy.jar
Missing Codebase manifest attribute for: http://localhost:8181/plugins/frameworksBusy.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/plugins/headlessclient.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/plugins/http.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/plugins/images.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/plugins/it2be-cryptor.jar
Missing Permissions manifest attribute for: http://localhost:8181/plugins/it2be-cryptor.jar
Missing Codebase manifest attribute for: http://localhost:8181/plugins/it2be-cryptor.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/plugins/it2be-tools.jar
Missing Permissions manifest attribute for: http://localhost:8181/plugins/it2be-tools.jar
Missing Codebase manifest attribute for: http://localhost:8181/plugins/it2be-tools.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/plugins/mail.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/plugins/maintenance.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/plugins/pdf_output.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/plugins/rawSQL.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/plugins/scheduler.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/plugins/serialize.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/plugins/servoy_jasperreports.jar
Missing Permissions manifest attribute for: http://localhost:8181/plugins/servoy_jasperreports.jar
Missing Codebase manifest attribute for: http://localhost:8181/plugins/servoy_jasperreports.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/plugins/spellcheck.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/plugins/tabxport.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/plugins/udp.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/plugins/window.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/plugins/xmlreader.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/lib/jabsorb.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/lib/fs-parser.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/lib/fs-commons.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/plugins/images/jai_imageio.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/lib/slf4j-api.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/lib/slf4j-jdk14.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/lib/xstream.jar
Missing Application-Name: manifest attribute for: http://localhost:8181/plugins/scheduler/quartz.jar


Steve in L.A.
SteveInLA
 
Posts: 233
Joined: Thu Jul 29, 2004 12:00 am
Location: Southern Oregon, USA

Re: JAR file manifest does not contain the Permissions attri

Postby pbakker » Mon Oct 28, 2013 9:06 pm

This is a known issue with the latest update to Java 7. See https://support.servoy.com/browse/SVY-5309.
pbakker
 
Posts: 2822
Joined: Wed Oct 01, 2003 8:12 pm
Location: Amsterdam, the Netherlands

Re: JAR file manifest does not contain the Permissions attri

Postby SteveInLA » Mon Oct 28, 2013 9:38 pm

So it looks like resigning my jars with v1.3 of the signtester tool should fix this. Trying that now.

Steve in L.A.
SteveInLA
 
Posts: 233
Joined: Thu Jul 29, 2004 12:00 am
Location: Southern Oregon, USA

Re: JAR file manifest does not contain the Permissions attri

Postby SteveInLA » Mon Oct 28, 2013 9:58 pm

Every time I use the Signtester Tool, it bumps on the file wicket-extensions.jar with these messages:
C:\Servoy 7.x.x\application_server\.\lib\wicket-extentions.jar didnt verify
C:\Servoy 7.x.x\application_server\.\lib\wicket-extentions.jar repacked
C:\Servoy 7.x.x\application_server\.\lib\wicket-extentions.jar repacked
Exception in thread "main" java.lang.RuntimeException: exit not allowed, status
= 1
at com.servoy.jarsigner.SignerTest$1.checkExit(SignerTest.java:100)
at java.lang.Runtime.exit(Unknown Source)
at java.lang.System.exit(Unknown Source)
at sun.security.tools.JarSigner.run(Unknown Source)
at com.servoy.jarsigner.SignerTest.dir(SignerTest.java:260)
at com.servoy.jarsigner.SignerTest.main(SignerTest.java:130)

Do I just need to pull this jar out and replace it after signing?

Steve in L.A.
SteveInLA
 
Posts: 233
Joined: Thu Jul 29, 2004 12:00 am
Location: Southern Oregon, USA

Re: JAR file manifest does not contain the Permissions attri

Postby SteveInLA » Mon Oct 28, 2013 10:28 pm

I had forgotten to close Developer and also was not using the 'overwrite' parameter. I made a self-signed keystore file and used the following command with Signtester.jar v1.3, using the domain of my server as the value for Dcodebase (in this case, localhost):

Code: Select all
java -Dcodebase=www.servoy-stuff.net -jar signtester.jar yourkeystorefile yourpassword youralias overwrite


I no longer get the Java security warning for Servoy files at all and all the 'Missing codebase..." lines no longer appear in the console. I still get a warning for the one bean I need to sign with a code-signing certificate, but I feel confident that I will be able to figure that out.

Thanks again,
Steve in L.A.
SteveInLA
 
Posts: 233
Joined: Thu Jul 29, 2004 12:00 am
Location: Southern Oregon, USA

Re: JAR file manifest does not contain the Permissions attri

Postby huber » Wed Nov 06, 2013 2:13 pm

I think we are in this trap as well and get these message at startup of our application and all clients (some dozens) are stuck, i. e. can't work. As the customer has the BYOD strategy, we have no control about what Java version users have (but quite a lot have upgraded to Java 1.7.0_45).

Code: Select all
Missing Application-Name: manifest attribute for: http://hades:8080/lib/j2db.jar
Missing Application-Name: manifest attribute for: http://hades:8080/lib/js.jar
Missing Application-Name: manifest attribute for: http://hades:8080/plugins/browser_suite/DJNativeSwing-SWT.jar
Missing Application-Name: manifest attribute for: http://hades:8080/plugins/browser_suite/DJNativeSwing.jar
Missing Application-Name: manifest attribute for: http://hades:8080/browser_suite/swt/macosx/org.eclipse.swt.cocoa.macosx.x86_64_3.8.1.v3834e.jar
JNLPClassLoader: Finding library libswt-cocoa-3834.dylib
JNLPClassLoader: Finding library libswt-cocoa.dylib
JNLPClassLoader: Finding library libswt-pi-cocoa-3834.dylib
JNLPClassLoader: Finding library libswt-pi-cocoa.dylib

We used the latest signtester version 1.3 (date 10/24/2013 10:22 pm) to sign our plugins.

Any help is greatly appreciated, Robert
Robert Huber
7r AG, Switzerland
SAN Developer
http://www.seven-r.ch
User avatar
huber
 
Posts: 516
Joined: Mon May 14, 2012 11:31 pm

Re: JAR file manifest does not contain the Permissions attri

Postby Harjo » Wed Nov 06, 2013 4:10 pm

Looking at this, you have to look deeper into the browser-suite!
is the browser-suite Java 7 compatible? mac? windows?

Missing Application-Name: is just a warning, not a blocker!
and if you have signed everything with the latest signtester, this warning should disappear
Harjo Kompagnie
ServoyCamp
Servoy Certified Developer
Servoy Valued Professional
SAN Developer
Harjo
 
Posts: 4321
Joined: Fri Apr 25, 2003 11:42 pm
Location: DEN HAM OV, The Netherlands

Re: JAR file manifest does not contain the Permissions attri

Postby ptalbot » Wed Nov 06, 2013 4:56 pm

All this says here is that some jars have a missing attribute.
The jars seems to load and the native library as well.
Without any exception stack trace it's hard to tell whether the browser suite has anything to do with it...
Patrick Talbot
Freelance - Open Source - Servoy Valued Professional
https://www.servoyforge.net
Velocity rules! If you don't use it, you don't know what you're missing!
User avatar
ptalbot
 
Posts: 1654
Joined: Wed Mar 11, 2009 5:13 am
Location: Montreal, QC

Re: JAR file manifest does not contain the Permissions attri

Postby huber » Mon Nov 11, 2013 10:47 am

Hi Patrick

I removed the browser suite and that was it. It works now as expected. So the problems seems to be related to the browser suite.

ptalbot wrote:All this says here is that some jars have a missing attribute.
The jars seems to load and the native library as well.
Without any exception stack trace it's hard to tell whether the browser suite has anything to do with it...
Robert Huber
7r AG, Switzerland
SAN Developer
http://www.seven-r.ch
User avatar
huber
 
Posts: 516
Joined: Mon May 14, 2012 11:31 pm

Re: JAR file manifest does not contain the Permissions attri

Postby gdurniak » Mon Dec 09, 2013 8:00 pm

Browser Suite ? What Browser Suite ?

Please provide some more details ...

greg

> I removed the browser suite and that was it. It works now as expected. So the problems seems to be related to the browser suite.
File Shoppe
gdurniak
 
Posts: 232
Joined: Thu Jul 08, 2004 7:25 pm
Location: Bayside, NY, USA

Re: JAR file manifest does not contain the Permissions attri

Postby mboegem » Mon Dec 09, 2013 11:20 pm

gdurniak wrote:Browser Suite ? What Browser Suite ?


Hi Greg,
if it doesn't ring a bell you probably didn't install it. :-)

Anyway, you can find it here: https://www.servoyforge.net/projects/browsersuite
Marc Boegem
Solutiative / JBS Group, Partner
• Servoy Certified Developer
• Servoy Valued Professional
• Freelance Developer

Image

Partner of Tower - The most powerful Git client for Mac and Windows
User avatar
mboegem
 
Posts: 1742
Joined: Sun Oct 14, 2007 1:34 pm
Location: Amsterdam

Re: JAR file manifest does not contain the Permissions attri

Postby gdurniak » Tue Dec 10, 2013 12:03 am

That's what I thought

So then, since we did not install it, how do we fix this new Java Warning thing ?

greg

> if it doesn't ring a bell you probably didn't install it.
File Shoppe
gdurniak
 
Posts: 232
Joined: Thu Jul 08, 2004 7:25 pm
Location: Bayside, NY, USA

Re: JAR file manifest does not contain the Permissions attri

Postby SteveInLA » Tue Dec 10, 2013 12:15 am

gdurniak wrote:So then, since we did not install it, how do we fix this new Java Warning thing ?


Take a look at this post: viewtopic.php?f=6&t=20042

Even if you have signed your jars with a code-signing certificate and used the latest version of signtester.jar and included the argument -Dcodebase=<your domain> and replaced your server's servoy.vmClientArgs with a space, you will still get the yellow balloon talking about the Jar manifest missing permissions attributes because this is a Java 7 Update 45 bug. See this discussion for more info: https://www.servoyforge.net/issues/745#note-23

Steve in L.A.
SteveInLA
 
Posts: 233
Joined: Thu Jul 29, 2004 12:00 am
Location: Southern Oregon, USA


Return to Servoy Client

Who is online

Users browsing this forum: No registered users and 10 guests