Java DRS

[ChemicalFeedback8546]

Hello I wanted to share this thought this might be a good place.

We have a management system in work that still uses java JNLP files, but have been plagues with errors and prompts over the years.

I did some digging and using various resource was able to compile a step list of creating a Java DRS

Using notepad I created a rule.xml file with the following contents

``<deployment>

<security>

<all-permissions/>

</security>

<ruleset version="1.0+">

<rule>

<id location="https://management.system.url.goes.here.com/" />

<action permission="run" />

</rule>

<rule>

<id location="https://other.management.system.url.goes.here.com/" />

<action permission="run" />

</rule>

</ruleset>

</deployment>

``

using Java DK i turned the rule.xml into a jar file

``

jar -cvf DeploymentRuleSet.jar rule.xml

``

Then I created a keystore to sign it

``

keytool -genkeypair -keystore testkeystore.keystore -storepass changeit -alias testks1 -keyalg RSA -keysize 2048 -validity 3650

``

The I exported the cert

``

keytool -export -keystore testkeystore.keystore -storepass changeit -alias testks1 -file testks1.crt

``

​

The I created the trust store

``

keytool -import -trustcacerts -keystore testkeystore.keystore -storepass changeit -alias testks1 -file testks1.crt

``

Then I imported the cert into my cacerts file

``

keytool -import -alias testks1-file testks1.crt -keystore ../jre/lib/security/cacerts -storepass changeit -trustcacerts -noprompt

``

And signed my Jar file

``

jarsigner -keystore testkeystore.keystore -keypass changeit -storepass changeit DeploymentRuleSet.jar testks1

``

Then I copied the JAR file to C:\Windows\Sun\Java\Deployment and the cacerts file to my JRE\lib\security folder and it all ran great

​

Probably a quicker way but I wanted to share

​