Java Web Start 1.0 developer's guide (2)
Application Development Considerations
Developing applications that can be deployed with Java Web Start are generally the same as developing a stand-alone application for the Java 2 platform. Hence, the entry point for the application is the
standard public static void main(String argv).
However, in order to support Web deployment --
automatic download and launching of the application -- and to ensure that an application can run in a secure sandbox, there are a few added
An application must be delivered as a set of JAR files.
All application resources, such as files and images must be stored in JAR files; and they must be referred to using the getResource mechanism in the Java 2 platform (see below).
If an application is written to run in a secure sandbox, it must follow these restrictions:
No access to local disk.
All JAR files must be downloaded from the same host.
Network connections are enabled only to the host from which the JAR files are downloaded.
No security manager can be installed.
No native libraries.
Limited access to system properties. The application has read/write access to all system properties defined in the JNLP File, as well as read-only
access to the same set of properties than an Applet
has access to.
An application is allowed to use the System.exit call.
An application that needs unrestricted access to the system will need to be delivered in a set of signed JAR files. All entries in each JAR file must be signed.
Retrieving Resources from JAR files
Java Web Start only transfers JAR files from the Web server to the client machine. It determines where to store the JAR files on the local machine. Thus, an application cannot use disk-relative references to
resources such as images and configuration files.
All application resources must be retrieved from the JAR files specified in the resources section of the JNLP file, or retrieved explicitly using an HTTP request to the Web server. We recommend storing resources in JAR files, since they will be cached on the local machine by Java Web Start.
The following code example shows how to retrieve
images from a JAR file:
// Get current classloader
ClassLoader cl =
// Create icons
Icon saveIcon = new
Icon cutIcon = new
The example assumes that the following entries exist
in one of the JAR files for the application:
Security and Code Signing
Java Web Start addresses the security issues of:
Protecting users against malicious code (intentional
& unintentional) that may affect local files
Protecting enterprises against code that may attempt to access or destroy data on networks
Applications launched with Java Web Start are -- by
default -- run in a restricted environment where they have limited access to local computing resources, such as storage devices and the local
network. In this sandbox environment, Java Web Start can guarantee that a downloaded and potentially untrusted application cannot compromise the security of the local files or the network.
An additional security feature supported by Java Web Start is digital code signing. If an application being invoked is delivered in one or more signed JAR files, Java Web Start will verify that the contents of the JAR file have not been modified since they were signed. If verification of a digital signature fails, Java Web Start will not run the application, since it may have been compromised by a third-party.
The support for code signing is important for both users and for application service providers. This service makes it possible for users to verify that
an application comes from a trusted source. Because the application service provider signs the code, both can be ensured that no other party can impersonate the application on the Web. A signed application that is trusted by the user can also request additional system privileges, such as access to a local disk.
Java Web Start presents a dialog displaying the application's origin, based on the signer's certificate, before the application is launched. Thereby allowing the user to make an informed decision whether to grant additional privileges to the downloaded code, or not.
An application can request full access to a client system when all its JAR files are signed by including the following settings in the JNLP file:
The implementation of code signing in Java Web Start is based on the security API in the core Java 2 Platform. The Java 2 SE JRE 1.2.x supports code signing with the SHAwithSDA algorithm. Java 2 SE JRE 1.3 also supports MD2withRSA and MD5withRSA. The MD5withRSA is currently the most often used
Developers sign code for use with Java Web Start in the same manner as for Java Applets by using the standard jarsigner tool from the Java 2 SE SDK. The documentation for the jarsigner tool provides examples on how to sign code, create test
certificates, and other signing related issues.
Java Web Start also support use of the Netscape signtool when used with the Java 2 SE JRE 1.3.0. See the Netscape Web site for details:
Signing JAR Files with a Test Certificate
Here are the steps needed to sign a JAR file with a test certificate: