Details
-
Enhancement
-
Resolution: Fixed
-
P4
-
fx2.0
Description
Goal:
Reduce download footprint of large signed apps. REduce time needed to validate signatures on the jar.
Justification:
Traditional signed jar contains 2 signatures per entry of the jar. This is significant overhead.
For FX 1.3 jars this was extra 500Kb of download size.
It is important to support this way of deployment for first release, so FX developers may rely on it (unlike what happened with pack200
that was only supported for newer JRE releases and therefore was used seldom if developer need to support users of older JREs)
Security concerns:
Passed review by security team.
Public API changes:
a) new ant task to sign FX application as BLOB
Implementation details:
Except ant task changes rest of the implementation is on JRE side and most of them were completed in JRE7 timeframe as approved PRD feature. However, as feature was planned for use with FX and did not pass security review in time we kept it disabled for end users. For FX 2.0 we enabled it, tuned according to comments of security team and added support for "cache disabled" scenario.
See following wiki page for further details: http://j2se.sfbay.sun.com/web/bin/view/Deployment/SignJarAsBLOB
Development effort:
Work is done. It is in since b36 and finally fully enabled in b38. Some bug fixing may be needed.
SQE effort:
???
Reduce download footprint of large signed apps. REduce time needed to validate signatures on the jar.
Justification:
Traditional signed jar contains 2 signatures per entry of the jar. This is significant overhead.
For FX 1.3 jars this was extra 500Kb of download size.
It is important to support this way of deployment for first release, so FX developers may rely on it (unlike what happened with pack200
that was only supported for newer JRE releases and therefore was used seldom if developer need to support users of older JREs)
Security concerns:
Passed review by security team.
Public API changes:
a) new ant task to sign FX application as BLOB
Implementation details:
Except ant task changes rest of the implementation is on JRE side and most of them were completed in JRE7 timeframe as approved PRD feature. However, as feature was planned for use with FX and did not pass security review in time we kept it disabled for end users. For FX 2.0 we enabled it, tuned according to comments of security team and added support for "cache disabled" scenario.
See following wiki page for further details: http://j2se.sfbay.sun.com/web/bin/view/Deployment/SignJarAsBLOB
Development effort:
Work is done. It is in since b36 and finally fully enabled in b38. Some bug fixing may be needed.
SQE effort:
???