This Bugzilla instance is a read-only archive of historic NetBeans bug reports. To report a bug in NetBeans please follow the project's instructions for reporting issues.

Bug 257731 - Dependent jars are not getting signed while building Java Webstart Application
Summary: Dependent jars are not getting signed while building Java Webstart Application
Status: RESOLVED WORKSFORME
Alias: None
Product: projects
Classification: Unclassified
Component: Java Webstart (show other bugs)
Version: 8.0.2
Hardware: PC Windows 7
: P1 normal (vote)
Assignee: Tomas Zezula
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-01-28 09:10 UTC by shilpa1990
Modified: 2016-06-09 12:43 UTC (History)
1 user (show)

See Also:
Issue Type: DEFECT
Exception Reporter:


Attachments
Screenshot of the exception I am getting. (14.02 KB, image/png)
2016-01-28 09:10 UTC, shilpa1990
Details
Screenshot (28.49 KB, image/png)
2016-06-09 12:43 UTC, Tomas Zezula
Details
Screenshot2 (17.90 KB, image/png)
2016-06-09 12:43 UTC, Tomas Zezula
Details

Note You need to log in before you can comment on or make changes to this bug.
Description shilpa1990 2016-01-28 09:10:12 UTC
Created attachment 158260 [details]
Screenshot of the exception I am getting.

I am signing my Web Start application with trusted certificates.
However, the 3rd party jars in dist/lib seem to be unsigned.

So when I run my application in the debugger, it refuses to start complaining of unsigned jars.

ExitException[ 3]com.sun.deploy.net.FailedDownloadException: Unable to load resource  file:/C:/Users/me/Desktop/dist/lib/jna-4.0.1.jar

I need a urgent soluntion for the issue . Please help me with the same.
Comment 1 Tomas Zezula 2016-06-09 12:43:03 UTC
Both the project main jar and the dependent libraries (dist/lib/*.jar) are signed.
In case the jar is unsigned the error shown in the attached screenshot is shown.

In my simple test project AnagramGame depending on Lucene-core-3.5.0.jar both jars are signed and the following output is logged:

Signing JAR: /Users/tom/Downloads/test/AnagramGame/dist/anagrams.jar to /Users/tom/Downloads/test/AnagramGame/dist/anagrams.jar as ...
Signing JAR: /Users/tom/Downloads/test/AnagramGame/dist/lib/lucene-core-3.5.0.jar to /Users/tom/Downloads/test/AnagramGame/dist/lib/lucene-core-3.5.0.jar ...

Also looking at the dist/lib/lucene-core-3.5.0.jar the jar contains signing, see screenshot2.


The signing is done in jnlp-impl.xml:
<sign-jars keystore="${jnlp.signjar.keystore}" storepass="${jnlp.signjar.storepass}" 
                keypass="${jnlp.signjar.keypass}" alias="${jnlp.signjar.alias}" mainjar="${dist.jar}" destdir="dist"
                codebase="${jnlp.codebase.value}" signedjarsprop="jnlp.signed.jars"
                componentsprop="jnlp.components">
            <fileset dir="dist/lib">
                <include name="*.jar"/>
            </fileset>
        </sign-jars>

Please attach a test project.
Comment 2 Tomas Zezula 2016-06-09 12:43:32 UTC
Created attachment 160011 [details]
Screenshot
Comment 3 Tomas Zezula 2016-06-09 12:43:53 UTC
Created attachment 160012 [details]
Screenshot2