I Just learned about an oracle feature called "Deployment Rule Sets", which provides added security on client PCs that run webstart apps. In a nutshell the client PC needs to have a signed xml file containing rules that are matched against a webstart app that is trying to run. The rule can permit/deny/restrict apps that match one of the rules.
https://docs.oracle.com/javase/8/docs/t ... rules.html
Is this supported in OpenWebStart?
Thanks!
Support for Deployment Rule Sets?
-
- Posts: 81
- Joined: 25 Mar 2020, 12:21
Re: Support for Deployment Rule Sets?
No, this is feature is not implemented up to now as it had lower priority by our major sponsors in the past. As you can see at https://openwebstart.com/feature-table/ it is on the list of unscheduled features with no activities on this topic right now. The situation might change when we find a sponsor for the development.
Re: Support for Deployment Rule Sets?
Thanks for the response.
So OWS will simply ignore any Deployment Rule Sets, but will still successfully invoke webstart apps right?
So OWS will simply ignore any Deployment Rule Sets, but will still successfully invoke webstart apps right?
-
- Posts: 232
- Joined: 27 Mar 2020, 09:55
Re: Support for Deployment Rule Sets?
Yes it works with most JNLP files.
Re: Support for Deployment Rule Sets?
I notice on https://openwebstart.com/feature-table/ that the "Deployment Rule Set" feature(s) are shown as "Parrtially Implemented". Has work begun on this feature?
If not, are there any alternatives or workarounds to this feature? e want to perform launch-time validation of the remote app using a jnlp verification (herf) or a certificate hash check, as in the JavaWebStart Deployment Role Sets feature.
If not, are there any alternatives or workarounds to this feature? e want to perform launch-time validation of the remote app using a jnlp verification (herf) or a certificate hash check, as in the JavaWebStart Deployment Role Sets feature.
-
- Posts: 232
- Joined: 27 Mar 2020, 09:55
Re: Support for Deployment Rule Sets?
There is currently no effort from our side to bring the Deployment Rule Set into OWS