Page 1 of 1

Support for Deployment Rule Sets?

Posted: 19 Sep 2020, 01:56
by javaapp
I Just learned about an oracle feature called "Deployment Rule Sets", which provides added security on client PCs that run webstart apps. In a nutshell the client PC needs to have a signed xml file containing rules that are matched against a webstart app that is trying to run. The rule can permit/deny/restrict apps that match one of the rules.

https://docs.oracle.com/javase/8/docs/t ... rules.html

Is this supported in OpenWebStart?

Thanks!

Re: Support for Deployment Rule Sets?

Posted: 21 Sep 2020, 08:20
by Andreas Ehret
No, this is feature is not implemented up to now as it had lower priority by our major sponsors in the past. As you can see at https://openwebstart.com/feature-table/ it is on the list of unscheduled features with no activities on this topic right now. The situation might change when we find a sponsor for the development.

Re: Support for Deployment Rule Sets?

Posted: 21 Sep 2020, 18:35
by javaapp
Thanks for the response.

So OWS will simply ignore any Deployment Rule Sets, but will still successfully invoke webstart apps right?

Re: Support for Deployment Rule Sets?

Posted: 21 Sep 2020, 21:55
by Stephan Classen
Yes it works with most JNLP files.

Re: Support for Deployment Rule Sets?

Posted: 18 Jun 2021, 23:42
by javaapp
I notice on https://openwebstart.com/feature-table/ that the "Deployment Rule Set" feature(s) are shown as "Parrtially Implemented". Has work begun on this feature?

If not, are there any alternatives or workarounds to this feature? e want to perform launch-time validation of the remote app using a jnlp verification (herf) or a certificate hash check, as in the JavaWebStart Deployment Role Sets feature.

Re: Support for Deployment Rule Sets?

Posted: 08 Jul 2021, 10:46
by Stephan Classen
There is currently no effort from our side to bring the Deployment Rule Set into OWS