如何通过JNLP给java小程序授予所有权限而不弹窗

Question

我们正在使用 jnlp 启动一个小程序 小程序需要加载原生库 jar 和 jnlp 使用自行生成的证书进行签名。 jnlp 授予所有权限与

<security>
     <all-permissions/>
</security>

策略文件授予所有权限 授予 { 权限 java.security.AllPermission; };

我们收到一个弹出对话框“java安全警告” 也就是说：该应用程序将执行不安全的操作。您想继续吗？

继续或取消（请参阅随附的屏幕截图）

没有“始终允许”按钮

这意味着该对话框“每次”启动小程序时都会弹出。这对于用户来说很烦人。

可以采取什么措施来禁止弹出此对话框或使其最多出现一次？

Answer 1

如何才能禁止弹出此对话框或使其最多出现一次？

使用经过可信机构验证的证书。禁用/忽略自签名证书的“始终允许”字段是 Oracle 不太可能更改的决定。

Answer 2

实际上，我们在 JNLP 参数上遇到了问题。您不能在 JNLP jre args 参数中指定任何参数，否则您将收到安全警告。

为了避免弹出安全警告，请使用第 638 行列表中的属性和 JVM 参数：
http:// javasourcecode.org/html/open-source/jdk/jdk-6u23/com/sun/deploy/config/Config.java.html

在您的 JNLP 上，如果 JVM 参数如果包含其中未列出的内容，即使您正确签署了证书，您也会收到弹出窗口。这一切都归结为使用“安全”参数+正确的证书就可以了。

编辑

URL 已被删除，所以这里是有效的参数：

// note: this list MUST correspond to native secure.c file
private static String[] secureVmArgs = {
    "-d32",                         /* use 32-bit data model if available */
    "-client",                      /* to select the "client" VM */
    "-server",                      /* to select the "server" VM */
    "-verbose",                     /* enable verbose output */
    "-version",                     /* print product version and exit */
    "-showversion",                 /* print product version and continue */
    "-help",                        /* print this help message */
    "-X",                           /* print help on non-standard options */
    "-ea",                          /* enable assertions */
    "-enableassertions",            /* enable assertions */
    "-da",                          /* disable assertions */
    "-disableassertions",           /* disable assertions */
    "-esa",                         /* enable system assertions */
    "-enablesystemassertions",      /* enable system assertions */
    "-dsa",                         /* disable system assertione */
    "-disablesystemassertions",     /* disable system assertione */
    "-Xmixed",                      /* mixed mode execution (default) */
    "-Xint",                        /* interpreted mode execution only */
    "-Xnoclassgc",                  /* disable class garbage collection */
    "-Xincgc",                      /* enable incremental gc. */
    "-Xbatch",                      /* disable background compilation */
    "-Xprof",                       /* output cpu profiling data */
    "-Xdebug",                      /* enable remote debugging */
    "-Xfuture",                     /* enable strictest checks */
    "-Xrs",                         /* reduce use of OS signals */
    "-XX:+ForceTimeHighResolution", /* use high resolution timer */
    "-XX:-ForceTimeHighResolution", /* use low resolution (default) */
    "-XX:+PrintGCDetails",          /* Gives some details about the GCs */
    "-XX:+PrintGCTimeStamps",       /* Prints GCs times happen to the start of the application */
    "-XX:+PrintHeapAtGC",           /* Prints detailed GC info including heap occupancy */
    "-XX:PrintCMSStatistics",       /* If > 0, Print statistics about the concurrent collections */
    "-XX:+PrintTenuringDistribution",  /* Gives the aging distribution of the allocated objects */
    "-XX:+TraceClassUnloading",     /* Display classes as they are unloaded */
    "-XX:SurvivorRatio",            /* Sets the ratio of the survivor spaces */
    "-XX:MaxTenuringThreshol",      /* Determines how much the objects may age */
    "-XX:CMSMarkStackSize",
    "-XX:CMSMarkStackSizeMax",
    "-XX:+CMSClassUnloadingEnabled",/* It needs to be combined with -XX:+CMSPermGenSweepingEnabled */
    "-XX:+CMSIncrementalMode",      /* Enables the incremental mode */
    "-XX:CMSIncrementalDutyCycleMin",  /* The percentage which is the lower bound on the duty cycle */
    "-XX:+CMSIncrementalPacing",    /* Automatic adjustment of the incremental mode duty cycle */
    "-XX:CMSInitiatingOccupancyFraction",  /* Sets the threshold percentage of the used heap */
    "-XX:+UseConcMarkSweepGC",      /* Turns on concurrent garbage collection */
    "-XX:-ParallelRefProcEnabled",
    "-XX:ParallelGCThreads",        /* Sets the number of parallel GC threads */
    "-XX:ParallelCMSThreads",
    "-XX:+DisableExplicitGC",       /* Disable calls to System.gc() */
    "-XX:+UseCompressedOops",       /* Enables compressed references in 64-bit JVMs */
    "-XX:+UseG1GC",
    "-XX:GCPauseIntervalMillis",
    "-XX:MaxGCPauseMillis"          /* A hint to the virtual machine to pause times */
};

编辑

当时我们有这些参数：

    <j2se version="1.6.0+"
         initial-heap-size="${heap.init}"
         max-heap-size="${heap.max}"
         java-vm-args="-Djava.security.policy=${jnlp.ip}${jnlp.port}/ed/security/java.policy"/>

问题出在 -Djava.security.policy 上，我无法理解弹出窗口，直到我从那里删除它。

java 源 jdk6.23 的新 URL

Answer 3

在 JAVA_OPTS 中使用远程调试参数可能会导致弹出此消息

-agentlib:jdwp=transport=dt_socket,address=localhost:8000,server=y,suspend=n

Answer 4

我有以下参数并遇到了同样的问题：

-Xss4m -Xdebug -Xrunjdwp:transport=dt_socket,server=y,suspend=n,address=5021

删除它们解决了它。