Apple Event: May 7th at 7 am PT
So, 10.8.4 has protected users, by requiring the signing of jnlp files. However, it seems Apple has not provided any documentation on how to do that, nor any warning that this was going to happen.
Does anyone know how to sign jnlp files?
OS X Mountain Lion (10.8.4)
In System Preferences > General check "Allow applications from... anywhere. (You'll need to open the lock and authenticate). Then download the jnlp, it will be in your "Downloads" folder, or in Safari look under Download arrow...
and then double-click on the .jnlp.
Also check in System Preferences > Java > Java Control Panel > Security and be sure that "Enable Java Content is check marked...
Thanks, MacJack.
In addition to changing the Preferences (which would also affect other applications), you could also:
- Right-click (or control-click) on an individual .jnlp file, select Open. (works for one file at a time).
- Open the file from the command line: $ javaws file.jnlp
My question (which is probably better suited for the developer forums) is really about how one can construct a .jnlp file which does not require these awkward workarounds. It seems that it needs to be signed, but there does not appear to be any documentation about how to sign.
In my case, the jnlp file is dynamically generated by jsp. How should I go about signing this? Help...
@@pple4eva: I would guess you'd need to sign each one. You can do that with codesign. That may be hard to intregrate into processes, but the real roadblock is how to get this signed .jnlp file to people. It seems that this signature as created from codesign is stored in metadata, and is not transferred in a normal HTTP transaction.
This is no "allow applications from anywhere" under the "general" tab. I am using 10.8.4
This procedure is not working for me.
I receive a partial file in my Downloads folder "unconfirmed crdownload" and it will not open.
It is not in "General". It is in "Security & Privacy". But having it checked makes NO difference as far as I can tell.
Robbie (Expert Mac User since 1984)
Macjack,
Doing this AND using chrome instead of safari did the trick. THANKS!
Robbie
Switching to chrome solved the problem I was having using java webstart, even without changing the security settings. Thanks!
10.8.4 Gatekeeper restricting launch of Java Web Start (jnlp) files
