Monday, February 18, 2013

Java web start: running unsigned jars

Q: Did you ever need to run unsigned jar files referred from jnlp (java web start)?

There is a simple (but dangerous) way.
There might be various reasons such a bad thing (bad from the security point of view), but most probably to speed up development (as jars signing is quite time intensive process).

Depending if you have jdk/jre installed add to the file (in my case jdk installed):
$JAVA_HOME/jre/lib/security/javaws.policy
following:
grant {
    permission java.security.AllPermission;
};
Since now on you should be able to run even unsigned code started using javaws command.

No comments: