SparkAngels cannot connect to its servers : java.security.AccessControlException: access denied (java.lang.RuntimePermission accessClassInPackage.sun.security.internal.spec)

Bug #898823 reported by Mossroy
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
openjdk-6 (Ubuntu)
Invalid
Undecided
Unassigned

Bug Description

SparkAngels is a java application that is runned via JNLP. http://www.spark-angels.com
The current jnlp file can be found here : http://dnld0.sparkom.com/sparkangels/sangels/sparkangels.jnlp

With OpenJDK 6b20-1.9.10-0ubuntu1~10.04.2, it starts OK, but fails to connect to its servers.

To reproduce, you can start the JNLP on command-line (javaws sparkangels.jnlp), open the dropdown "Options", choose "Utilisation par code" then "Obtenir un code" (this is in French, maybe it would be translated in your language when you run it)
At this moment, the application tries to connect to its servers and it fails with the following error message in the log :
---W-A-R-N-I-N-G--- IO-ERROR CONTACTING SERVER cccp1.sparkom.com: java.security.AccessControlException: access denied (java.lang.RuntimePermission accessClassInPackage.sun.security.internal.spec)
---W-A-R-N-I-N-G--- IO-ERROR CONTACTING SERVER cccp0.sparkom.com: java.security.AccessControlException: access denied (java.lang.RuntimePermission accessClassInPackage.sun.security.internal.spec)
sparkangels.xu: No server available
 at sparkangels.lt.b(Unknown Source)
 at sparkangels.vq.a(Unknown Source)
 at sparkangels.vq.a(Unknown Source)
 at sparkangels.vq.a(Unknown Source)
 at sparkangels.q.m(Unknown Source)
 at sparkangels.q.b(Unknown Source)
 at sparkangels.ih.run(Unknown Source)
---W-A-R-N-I-N-G--- EXCEPTION MESSAGE: No server available

If I use sun-java-6 packages instead of openjdk-6, it works correctly.
If I try to open the same jnlp with oneiric (with version 6b23~pre11-0ubuntu1.11.10), it works correctly.

So it looks like a bug on this version of openjdk, that has been fixed in latest ubuntu version.
I found a workaround here : https://bugzilla.redhat.com/show_bug.cgi?id=471413#c33
You simply have to create a file ~/.java.policy with this content :
grant {
   permission java.security.SecurityPermission
        "putProviderProperty.SunJCE";
   permission java.lang.RuntimePermission
        "accessClassInPackage.sun.security.internal.spec";
   permission java.lang.RuntimePermission
       "accessClassInPackage.sun.security.rsa";
   permission java.lang.RuntimePermission
        "accessClassInPackage.sun.security.internal.interfaces";
};

This application is very usefull to provide assistance through a remote desktop access. It's an alternative to VNC when NAT/port-forwarding is not properly configured.
Ideally, a backport would
A similar problem seems to happen on other java applications : http://www.havenandhearth.com/forum/viewtopic.php?f=4&t=15576

ProblemType: Bug
DistroRelease: Ubuntu 10.04
Package: openjdk-6-jre 6b20-1.9.10-0ubuntu1~10.04.2
ProcVersionSignature: Ubuntu 2.6.38-13.52~lucid1-generic 2.6.38.8
Uname: Linux 2.6.38-13-generic x86_64
Architecture: amd64
CheckboxSubmission: bb64787174aa01f1fb7ecfce8a2f831c
CheckboxSystem: 34179ae9d787c87b2b99043345f17cea
Date: Thu Dec 1 21:42:28 2011
ExecutablePath: /usr/lib/jvm/java-6-openjdk/jre/bin/javaws.real
InstallationMedia: Ubuntu 10.04 LTS "Lucid Lynx" - Release amd64 (20100427.1)
ProcEnviron:
 LANG=fr_FR.utf8
 SHELL=/bin/bash
SourcePackage: openjdk-6

Revision history for this message
Mossroy (mossroy) wrote :
Revision history for this message
Mossroy (mossroy) wrote :

The behavior is the same on a 32bit version of Ubuntu 10.04 : I checked on another machine

tags: removed: amd64
Revision history for this message
dino99 (9d9) wrote :

This version has expired some times ago, and no backport is expected as there is no 'security' reported problem

Changed in openjdk-6 (Ubuntu):
status: New → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.