From owner-freebsd-java@FreeBSD.ORG Tue Sep 14 14:10:47 2010 Return-Path: Delivered-To: freebsd-java@freebsd.org Received: from [127.0.0.1] (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by hub.freebsd.org (Postfix) with ESMTP id 4D4F1106564A; Tue, 14 Sep 2010 14:10:47 +0000 (UTC) (envelope-from jkim@FreeBSD.org) From: Jung-uk Kim To: freebsd-java@freebsd.org Date: Tue, 14 Sep 2010 10:10:28 -0400 User-Agent: KMail/1.6.2 References: <201009091743.01109.jkim@FreeBSD.org> <201009141005.37466.achill@matrix.gatewaynet.com> <201009141107.50998.achill@matrix.gatewaynet.com> In-Reply-To: <201009141107.50998.achill@matrix.gatewaynet.com> MIME-Version: 1.0 Content-Disposition: inline Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit Message-Id: <201009141010.39440.jkim@FreeBSD.org> Cc: Subject: Re: IcedTea6 Mozilla plugin with OpenJDK6 X-BeenThere: freebsd-java@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Porting Java to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Sep 2010 14:10:47 -0000 On Tuesday 14 September 2010 04:07 am, Achilleas Mantzios wrote: > Στις Tuesday 14 September 2010 10:05:22 ο/η Achilleas Mantzios έγραψε: > > Στις Monday 13 September 2010 20:54:21 ο/η Jung-uk Kim έγραψε: > > > On Friday 10 September 2010 07:32 pm, Ivan Voras wrote: > > > > On 11 September 2010 01:00, Jung-uk Kim wrote: > > > > > On Friday 10 September 2010 06:13 pm, Ivan Voras wrote: > > > > >> But I cannot start for example this one: > > > > >> > > > > >> http://java.sun.com/applets/jdk/1.4/demo/applets/ArcTest/e > > > > >>xample 1.h tml > > > > > > > > > > Probably you want to test it locally: > > > > > > > > > > file:///usr/local/openjdk6/demo/applets/ArcTest/example1.ht > > > > >ml > > > > > > > > Yes, the local copy works. So it is just failing to load > > > > applets over the network? Could this be some convoluted Java > > > > security problem? > > > > > > I believe it just timed out for your environment. In fact, > > > there is a reverse problem, i.e., some applets do not work > > > locally when they want to open local files. > > > > Is that how it is supposed to be? applets work in the sandbox, > > and by default they are denied access to any local resource. > > I remember i had to sign applets in order for them to be able to > > browse local directories. And then the (self produced) > > certificate should be accepted by the client (browser). > > > > > E.g., /usr/local/openjdk6/demo/applets/MoleculeViewer/ > > > and /usr/local/openjdk6/demo/applets/WireFrame/ fail because > > > they cannot open files in subdirectory (models). If anyone can > > > reproduce the same problem under Linux environment, please file > > > an upstream PR here: > > Just tested the molecule applets under Ubuntu and their Exception > trace is identical with the one in FreeBSD. Its not a bug. Unsigned > applets are not supposed to access the local file systems. No, it's a bug, please see below. http://download.oracle.com/javase/1.4.2/docs/guide/security/PolicyFiles.html Policy File Syntax ... For an applet (or an application running under a security manager) to be allowed to perform secured actions (such as reading or writing a file), the applet (or application) must be granted permission for that particular action. ... (The only exception is that code always automatically has permission to read files from its same (URL) location, and subdirectories of that location; it does not need explicit permission to do so.) Please try Sun's plugin, for example. JK > > > http://icedtea.classpath.org/bugzilla/ > > > > > > > > BTW, IcedTea plugin is not 100% compatible with > > > > > Sun/Oracle's. Your mileage may vary. ;-) > > > > > > > > But the underlying Java is OpenJDK, right? > > > > > > Almost. ;-) There is a big missing piece for applet support in > > > OpenJDK, i.e., Web Start. IcedTea team imported Netx as a > > > replacement but it is not quite drop-in replacement, IMHO: > > > > > > http://jnlp.sourceforge.net/netx/ > > > http://langel.wordpress.com/2008/01/11/icedtea-and-netx/ > > > > > > Jung-uk Kim