Support for Deployment Rule Sets?

The public knowledge pool and discussion forum of the OWS community. Do not post confidential information here!
javaapp
Posts: 39
Joined: 20 May 2020, 18:34

Support for Deployment Rule Sets?

Post by javaapp »

I Just learned about an oracle feature called "Deployment Rule Sets", which provides added security on client PCs that run webstart apps. In a nutshell the client PC needs to have a signed xml file containing rules that are matched against a webstart app that is trying to run. The rule can permit/deny/restrict apps that match one of the rules.

https://docs.oracle.com/javase/8/docs/t ... rules.html

Is this supported in OpenWebStart?

Thanks!

Andreas Ehret
Posts: 81
Joined: 25 Mar 2020, 12:21

Re: Support for Deployment Rule Sets?

Post by Andreas Ehret »

No, this is feature is not implemented up to now as it had lower priority by our major sponsors in the past. As you can see at https://openwebstart.com/feature-table/ it is on the list of unscheduled features with no activities on this topic right now. The situation might change when we find a sponsor for the development.

javaapp
Posts: 39
Joined: 20 May 2020, 18:34

Re: Support for Deployment Rule Sets?

Post by javaapp »

Thanks for the response.

So OWS will simply ignore any Deployment Rule Sets, but will still successfully invoke webstart apps right?

Stephan Classen
Posts: 232
Joined: 27 Mar 2020, 09:55

Re: Support for Deployment Rule Sets?

Post by Stephan Classen »

Yes it works with most JNLP files.

javaapp
Posts: 39
Joined: 20 May 2020, 18:34

Re: Support for Deployment Rule Sets?

Post by javaapp »

I notice on https://openwebstart.com/feature-table/ that the "Deployment Rule Set" feature(s) are shown as "Parrtially Implemented". Has work begun on this feature?

If not, are there any alternatives or workarounds to this feature? e want to perform launch-time validation of the remote app using a jnlp verification (herf) or a certificate hash check, as in the JavaWebStart Deployment Role Sets feature.

Stephan Classen
Posts: 232
Joined: 27 Mar 2020, 09:55

Re: Support for Deployment Rule Sets?

Post by Stephan Classen »

There is currently no effort from our side to bring the Deployment Rule Set into OWS

Post Reply