Hi! I noticed that this patch breaks jnlp files having the port number hardcoded in the codebase url, like some Avocent KVM : <jnlp spec="1.0+" codebase="http://kvm.example.com:80/viewers"> It causes long timeouts, while https://kvm.example.com:80/viewers/... url are tested, and fail.
So the everything works, just take longer time? Because to make this configure-able, is not exactly easy step. But is doable if it really breaks stuff.
Yes, the timeout is around 45s-60s, so not completely anecdotal. Ideally replacing http by https in the url should also take care to remove the port number in the same url when it exists. In the case of this particular KVM, the same content is also available in https on port 443.
I have the same problem with some urls where the port is not hardcoded (but the app should be served over http). See this page: http://www.agenziaentrate.gov.it/wps/content/nsilib/nsi/home/cosadevifare/versare/f24/sw+compilazione+f24#software [the link is: http://jws.agenziaentrate.it/jws/F24/F24OnLine.jnlp and I also tried running javaws directly]
(incidentally: my problem is on f27; I have not tested on f26)
I have recompiled icedtea-web from the repository (tip: 1478:8fc0a95eb645) If I comment line 103 in ResourceUrlCreator.java preferring https to http (see changeset 1398:0789465aecc8) then everything works nicely (otherwise I had to give up starting the application after 2 hours). I understand that the site of "agenziaentrate" does not follow the correct policy of serving the applets via https; however I would consider this a relevant bug for some real-world uses. Should this be escalated to upstream?
well, i'm the upstream:) I will add backward compatibility switch for you, does it sound correct?
That would be fine ;) Thanks!
If you mind to check http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2017-December/039040.html , does it suit your needs?
That change would be fine with me.
icedtea-web-1.7.1-1.fc27 has been submitted as an update to Fedora 27. https://bodhi.fedoraproject.org/updates/FEDORA-2017-0517b0fc3a
icedtea-web-1.7.1-1.fc26 has been submitted as an update to Fedora 26. https://bodhi.fedoraproject.org/updates/FEDORA-2017-11b43f49a4
icedtea-web-1.7.1-1.fc26 has been pushed to the Fedora 26 stable repository. If problems still persist, please make note of it in this bug report.
icedtea-web-1.7.1-1.fc27 has been pushed to the Fedora 27 stable repository. If problems still persist, please make note of it in this bug report.