Opened 8 years ago
Last modified 8 years ago
#500 new task
Replace Java Web Start with alternative app deployment platform
Reported by: | Kevin Milner | Owned by: | Kevin Milner |
---|---|---|---|
Priority: | major | Milestone: | |
Component: | build-process | Version: | |
Keywords: | Cc: |
Description
Oracle has slowly crippled Java Web Start as a delivery platform for full featured applications. The final straw is that the latest Java 8 releases require users to manually enter our domain (opensha.usc.edu) as a whitelisted software source in their Java control panel for any of our applications to run.
There are apparently some new deployment capabilities with JavaFX which I will investigate, and someone recommended Getdown to me.
Change History (6)
comment:1 Changed 8 years ago by
comment:2 Changed 8 years ago by
So I'm thinking that the easiest solution might be to just get an SSL certificate. John Yu says that we can get one that will work for $140/yr. This would keep our current build process working (with some minor adjustments), and should make Java Web Start workable again. Thoughts?
comment:3 Changed 8 years ago by
When in doubt, throw a little money at the problem. ;-)
Could we also just revert to having people download double-clickable jars, much like they would do with nightly builds anyway?
comment:4 Changed 8 years ago by
Yeah that could work. We would loose the ability to set the memory allocation, but that might actually be a good thing now that systems have more memory and Java will default to using more of it. Back in the day the default would typically be too small. It certainly is the simplest option. Does double clicking jars work out of the box on Mac OSX?
comment:5 Changed 8 years ago by
I'm not sure what happens on OS X if you don't have java installed; probably nothing. I'd imagine its the same for Win/Linux?. Ned is ambivalent; I'd get the certificate and see if that improves things. If it doesn't, we'll go back to jars, but that will require some time relearning and reconfiguring drupal to trigger file downloads.
comment:6 Changed 8 years ago by
Good news - John Yu just discovered that USC's umbrella certificate can sign any *.usc.edu certificate for free, so we'll do that. The app URLs are already opensha.usc.edu (as opposed to opensha.org) so this will be a somewhat easy change.
I have tested JavaFX deployment and found the following:
Pros:
Cons:
So, this could be a valid deployment strategy if we are willing to manually build apps for each platform on each release. We would then just supply jar files for nightly builds. It's a bit of a headache though compared to java web start which could be deployed automatically.
An alternative might just be to get a valid, recognized certificate and use that to sign our applications. Then Java Web Start should begin to work again.