Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-6783308

Browser certificates should not be loaded unless needed

XMLWordPrintable

    • b02
    • generic
    • generic
    • Not verified

        Processing following JNLP file causes initialization of HTTPS handler that does load browser certificates
        on startup (from static initializer).
        However, there are no https connections created and certificates are not used.

        <jnlp spec="1.0+" version="1.0.0" codebase="http://dl.javafx.com/" href="Decora__V1.0.0.jnlp">
        <information>
        <title>Effects Framework</title>
        <vendor>Sun Microsystems, Inc.</vendor>
        <homepage href="https://scenegraph-effects.dev.java.net/"/>
        <offline-allowed/>
        </information>
        <security>
        <all-permissions/>
        </security>
        <resources/>
        <resources os="Windows" arch="x86">
        <jar href="Decora-SSE__V1.0.0.jar" part="Decora" download="eager"/>
        <nativelib href="Decora-SSE-natives-windows-i586__V1.0.0.jar" part="Decora" download="eager"/>
        <jar href="Decora-HW__V1.0.0.jar" part="Decora" download="lazy"/>
        <jar href="Decora-D3D__V1.0.0.jar" part="Decora" download="lazy"/>
        <nativelib href="Decora-D3D-natives-windows-i586__V1.0.0.jar" part="Decora" download="lazy"/>
        <jar href="Decora-OGL__V1.0.0.jar" part="Decora" download="lazy"/>
        <extension name="jogl" href="jogl.jnlp" version="1.1.1">
        <ext-download ext-part="jogl" download="lazy"/>
        </extension>
        </resources>
        <resources os="Mac OS X">
        <jar href="Decora-SSE__V1.0.0.jar" part="Decora" download="eager"/>
        <nativelib href="Decora-SSE-natives-macosx__V1.0.0.jar" part="Decora" download="eager"/>
        </resources>
        <resources os="Linux">
        <jar href="Decora-HW__V1.0.0.jar" part="Decora" download="lazy"/>
        <jar href="Decora-OGL__V1.0.0.jar" part="Decora" download="lazy"/>
        <extension name="jogl" href="jogl.jnlp" version="1.1.1">
        <ext-download ext-part="jogl" download="lazy"/>
        </extension>
        </resources>
        <component-desc/>
        </jnlp>

              igor Igor Nekrestyanov (Inactive)
              igor Igor Nekrestyanov (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

                Created:
                Updated:
                Resolved:
                Imported:
                Indexed: