karakun / OpenWebStart

Run Web Start based applications after the release of Java 11
https://openwebstart.com
Other
427 stars 46 forks source link

The OWS 1.3.3 cannot load jar with error about Keystore error, when try to load certificate from C:\WINDOWS\Sun\Java\Deployment\trusted.certs #428

Open alslw opened 3 years ago

alslw commented 3 years ago

We install OWS 1.3.3 on Windows 10 (64bits) that have already installed public jre8 and try to use OWS to load our jar file by jnlp file. We found Keystore error with popup password for C:\WINDOWS\Sun\Java\Deployment\trusted.certs when OWS try to load certificate of amazon correto from directory C:\Users\.cache\icedtea-web\jvm-cache\amazon-corretto_1.8.252.09.2\lib\security\trusted.jssecerts and fail about this does not exists. From OWS log stage 1 it show error "[ITW-CORE][2021-06-03 12:39:48.309 EDT][ERROR][net.adoptopenjdk.icedteaweb.io.FileUtils] Cannot delete file C:\Users\davichou.cache\icedtea-web\jvm-cache\amazon-corretto_1.8.252.09.2\9b17092f-5245-4bf0-8ac7-f8fedc6c2f73" but it can download and save this jvm on local cache directory. From OWS log stage 2 It load system configuration from C:/WINDOWS/Sun/Java/deployment/deployment.config and load user configuration from C:/Users//.config/icedtea-web/deployment.properties but we found keystore error with popup password when it try to load certificate from C:\WINDOWS\Sun\Java\Deployment\trusted.certs. See the picture in below. Is this permission issue ?

Keystore_error
sclassen commented 3 years ago

OK, so basically what happens is that OWS found a keystore file in the specified location but was not able to open this file using the default password. You need to enter the correct password and OWS will open the file.

in-fke commented 3 years ago

Related?

389

376

alslw commented 3 years ago

Hi Because our user have public jre8 with deployment.config and deployment.properties in C:/WINDOWS/Sun/Java/deployment which it requires to load keystore file from C:\WINDOWS\Sun\Java\Deployment\trusted.certs but our user who use OWS to launch our jar, does not has permission to access this keystore file, then it will popup for password to access this file and generate keystore error issue. Could we set OWS to avoid to load deployment.config and deployment.properties in C:/WINDOWS/Sun/Java/deployment ?

in-fke commented 3 years ago

Did you read https://github.com/karakun/OpenWebStart/issues/376#issuecomment-767447358 ?

sclassen commented 3 years ago

Also read the following section of the user guide: https://openwebstart.com/docs/OWSGuide.html#_creating_a_system_configuration

in-fke commented 3 years ago

In OWS 1.4.0 the dialog looks different and you are able to hit cancel in order to ignore this truststore (which works for us). image