Java Deployment with JNLP and WebStart by Mauro Marinilli

Java Deployment with JNLP and WebStart



Download eBook




Java Deployment with JNLP and WebStart Mauro Marinilli ebook
Format: pdf
Publisher: Sams
ISBN: 0672321823, 9780672321825
Page: 393


This year we've seen a number of 0 day Java exploits surfacing and various mitigating steps mentioned in various sites that could be taken to prevent us from being compromised. Since Java 6 Update 10, Sun has distributed an NPAPI plugin and ActiveX control called "Java Deployment Toolkit" to provide developers with a simpler method of distributing their applications to end users. Java Web Start (henceforth, jws) provides java developers with a way to let users launch and install their applications using a URL to a Java Networking Launching Protocol (.jnlp) file (essentially some xml describing the program). I have downloaded the source code of Kettle 4.1.0 and I'm trying to use the Java Web Start. Installing Java 7 on my shiny new MacBook Pro with Retina display made all Java Web Start programs look absolutely crap by doing some not-too-fancy scaling on the graphics. If you have thousands of users who tend to Recently I was trying to move away from web-based JWS to one that delivers jars and jnlp to the client and installs locally. Java Web Start is full of bugs that never get resolved and make it next to unusable, and very costly, in business environment. Using Java Web Start ActiveX control can also be used to run a JNLP file but user interaction is required. API documentation for javax.jnlp package. For more information, see the docs on Java Web Start and JNLP here. URI.toURL(Unknown Source) at com.sun.deploy.net.proxy.DeployProxySelector.connectFailed(Unknown Source) at java.net.SocksSocketImpl.connect(Unknown Source) at java.net.Socket.connect(Unknown Source) at java.net. The update changed the location of the Java Web Start application so that the system opens the downloaded JNLP file as a text file, most likely with something called Dashcode. Java Web Start is a technology for deploying and updating desktop Java applications easily from a web server. It's much In fact, with the right JNLP, you can turn any existing applet into a JWS app without any modifications. Using Java Web Start technology, standalone Java software applications can be deployed with a single click over the network. If your application is deployed using webstart you can specify the minimum version required. To exploit This Java Deployment Toolkit classid CAFEEFAC-DEC7-0000-0000-ABCDEFFEDCBA was exploited in 2010 (CVE-2010-1423).

Links: