Java Web Start doesn't work after version 7u25

Question

I have a java application that is launchend via java web start (with glassfish 4.0). After updating to java 7u25, it doesn't work anymore. Here is a part of the error message.

Missing Permissions manifest attribute for: http://localhost:8080/___JWSappclient/___system/s1as/glassfish/modules/javax.security.auth.message-api.jar
Missing Codebase manifest attribute for: http://localhost:8080/___JWSappclient/___system/s1as/glassfish/modules/javax.security.auth.message-api.jar
Missing Permissions manifest attribute for: http://localhost:8080/___JWSappclient/___system/s1as/glassfish/modules/web-naming.jar
Missing Codebase manifest attribute for: http://localhost:8080/___JWSappclient/___system/s1as/glassfish/modules/web-naming.jar
#### Java Web Start Error:
#### java.lang.ClassCircularityError: com/sun/enterprise/security/ee/PermissionCache
Exception in thread "Javaws Secure Thread" java.lang.ClassCircularityError: com/sun/enterprise/security/ee/PermissionCache
    at java.lang.Class.getDeclaredMethods0(Native Method)
    at java.lang.Class.privateGetDeclaredMethods(Unknown Source)
    at java.lang.Class.getMethod0(Unknown Source)
    at java.lang.Class.isCheckMemberAccessOverridden(Unknown Source)
    at java.lang.Class.checkMemberAccess(Unknown Source)
    at java.lang.Class.newInstance(Unknown Source)
    at java.net.URL.getURLStreamHandler(Unknown Source)
    at java.net.URL.<init>(Unknown Source)
    at java.net.URL.<init>(Unknown Source)
    at java.net.URL.<init>(Unknown Source)

First of all, why is there suddenly a ClassCircularityError? Furthermore, to elminiate the attribute warnings, I might add the attributes to the manifest. But it is really a good plan to modify third-party jars?

Answer 1

We have noticed this problem as well and are tracking it via this just-opened GlassFish issue 20711.

Answer 2

Adding the Permissions and Codebase attribute in the manifest.mf file of the jar might resolve your problem. These are the latest updates in update 25. For your second question regarding the prompts, Change in third party jars is not appreciable. I'm myself stuck with this removal of prompts.