jalview webstart fails due to "JAR resources in JNLP file are not signed by same certificate"

Dear Jalview developers,

We use javawebstart to make jalview available to our users at
uniprot.org. Currently the jalview app no longer wants to start up due
to this error "JAR resources in JNLP file are not signed by same
certificate".

Could you please have a look into this. As many of our users like the
jalview application to see alignment results.

Regards,
Jerven

This is the exception at startup.

JNLPException[category: Launch File Error : Exception: null : LaunchDesc:
<jnlp spec="1.0+" codebase="http://www.jalview.org/webstart/"
version="2.0" href="http://www.uniprot.org/align/201110052CF4R7GFKR.jnlp">
    <information>
      <title>Jalview</title>
      <vendor>The Barton Group</vendor>
      <homepage href="http://www.jalview.org"/>
      <description>Jalview Multiple Alignment Editor</description>
      <description kind="short">Jalview</description>
      <icon href="http://www.jalview.org/webstart/logo_big.gif"
kind="default"/>
      <offline-allowed/>
    </information>
    <security>
      <all-permissions/>
    </security>
    <update check="timeout" policy="always"/>
    <resources>
      <java version="1.5+"/>
      <jar href="http://www.jalview.org/webstart/jalview.jar"
download="eager" main="false"/>
      <jar
href="http://www.jalview.org/webstart/JGoogleAnalytics-0.2.1-SNAPSHOT.jar"
download="eager" main="false"/>
      <jar href="http://www.jalview.org/webstart/Jmol-12.1.13.jar"
download="eager" main="false"/>
      <jar href="http://www.jalview.org/webstart/activation.jar"
download="eager" main="false"/>
      <jar href="http://www.jalview.org/webstart/axis.jar"
download="eager" main="false"/>
      <jar
href="http://www.jalview.org/webstart/castor-1.1-cycle-xml.jar"
download="eager" main="false"/>
      <jar href="http://www.jalview.org/webstart/commons-discovery.jar"
download="eager" main="false"/>
      <jar href="http://www.jalview.org/webstart/commons-logging.jar"
download="eager" main="false"/>
      <jar href="http://www.jalview.org/webstart/jaxrpc.jar"
download="eager" main="false"/>
      <jar href="http://www.jalview.org/webstart/jhall.jar"
download="eager" main="false"/>
      <jar href="http://www.jalview.org/webstart/log4j-1.2.8.jar"
download="eager" main="false"/>
      <jar href="http://www.jalview.org/webstart/mail.jar"
download="eager" main="false"/>
      <jar href="http://www.jalview.org/webstart/min-jaba-client.jar"
download="eager" main="false"/>
      <jar href="http://www.jalview.org/webstart/regex.jar"
download="eager" main="false"/>
      <jar href="http://www.jalview.org/webstart/saaj.jar"
download="eager" main="false"/>
      <jar href="http://www.jalview.org/webstart/vamsas-client.jar"
download="eager" main="false"/>
      <jar href="http://www.jalview.org/webstart/wsdl4j.jar"
download="eager" main="false"/>
      <jar href="http://www.jalview.org/webstart/xercesImpl.jar"
download="eager" main="false"/>
      <jar href="http://www.jalview.org/webstart/xml-apis.jar"
download="eager" main="false"/>
      <property name="jalview.version" value="2.6.1"/>
    </resources>
    <application-desc main-class="jalview.bin.Jalview">
      <argument>-open</argument>

<argument>http://www.uniprot.org/align/201110052CF4R7GFKR.fasta</argument>
      <argument>-colour</argument>
      <argument>Clustal</argument>
      <argument>-features</argument>

<argument>http://www.uniprot.org/uniprot/?query=job:201110052CF4R7GFKR&format=gff</argument>
      <argument>-tree</argument>

<argument>http://www.uniprot.org/align/201110052CF4R7GFKR.dnd</argument>
    </application-desc>
</jnlp> ]
  at
com.sun.javaws.LaunchDownload.checkSignedResourcesHelper(LaunchDownload.java:1801)
  at
com.sun.javaws.LaunchDownload.checkSignedResources(LaunchDownload.java:1508)
  at com.sun.javaws.Launcher.prepareResources(Launcher.java:1232)
  at com.sun.javaws.Launcher.prepareAllResources(Launcher.java:621)
  at com.sun.javaws.Launcher.prepareToLaunch(Launcher.java:327)
  at com.sun.javaws.Launcher.prepareToLaunch(Launcher.java:199)
  at com.sun.javaws.Launcher.launch(Launcher.java:116)
  at com.sun.javaws.Main.launchApp(Main.java:416)
  at com.sun.javaws.Main.continueInSecureThread(Main.java:248)
  at com.sun.javaws.Main$1.run(Main.java:110)
  at java.lang.Thread.run(Thread.java:662)

Hello there, Jerven.

We use javawebstart to make jalview available to our users at
uniprot.org. Currently the jalview app no longer wants to start up due
to this error "JAR resources in JNLP file are not signed by same
certificate".

Could you please have a look into this. As many of our users like the
jalview application to see alignment results.

You need to update the JNLP file used by your server to the latest version (from www.jalview.org/webstart/jalview.jnlp), since the library dependencies in the JNLP file have changed.

Unfortunately, this is going to keep happening every time we create a new version, so you should look into creating a better system for uniprot to launch the latest Jalview. One of the best ways for doing this is to use the 'launchApp' service, which will rewrite the jalview JNLP with arguments for loading files into the desktop that are passed in as servlet parameters. I described it in a posting back in 2008 : http://www.jalview.org/pipermail/jalview-discuss/2008-May/000062.html

Jim.

···

On 05/10/2011 10:30, Jerven Bolleman wrote: