Download extensions are sets of classes (and related resources) in JAR files. A JAR file’s manifest can contain headers that refer to one or more download extensions. The extensions can be referenced in one of two ways:
\n
\n- by a Class-Path<\/TT> header<\/LI>
\n- by an Extension-List<\/TT> header<\/LI><\/UL>Note that at most one of each is allowed in a manifest. Download extensions indicated by a Class-Path<\/TT> header are downloaded only for the lifetime of the application that downloads them, such as a web browser. Their advantage is that nothing is installed on the client; their disadvantage is that they are downloaded each time they are needed. Download extensions that are downloaded by an Extension-List<\/TT> header are installed into the \/lib\/ext<\/TT> directory of the JRE that downloads them. Their advantage is that they are downloaded the first time they’re needed; subsequently they can be used without downloading. But as shown later in this tutorial, they are more complex to deploy.
\nSince download extensions that use the Class-Path<\/TT> headers are simpler, lets consider them first. Assume for example that a.jar<\/TT> and b.jar<\/TT> are two JAR files in the same directory, and that the manifest of a.jar<\/TT> contains this header: <\/P>
\nClass-Path: b.jar
\n<\/PRE><\/BLOCKQUOTE>Then the classes in b.jar<\/TT> serve as extension classes for purposes of the classes in a.jar<\/TT>. The classes in a.jar<\/TT> can invoke classes in b.jar<\/TT> without b.jar<\/TT>‘s classes having to be named on the class path. a.jar<\/TT> may or may not itself be an extension. If b.jar<\/TT> weren’t in the same directory as a.jar<\/TT>, then the value of the Class-Path<\/TT> header should be set to the relative pathname of b.jar<\/TT>.
\nThere’s nothing special about the classes that are playing the role of a download extension. They are treated as extensions solely because they’re referenced by the manifest of some other JAR file. <\/P>
\nTo get a better understanding of how download extensions work, let’s create one and put it to use. <\/P><\/BLOCKQUOTE>
\nAn Example<\/H3>
\nSuppose you want to create an applet that makes use of theRectangleArea<\/CODE> class of the previous section:
\npublic final class RectangleArea {
\n public static int area(java.awt.Rectangle r) {
\n return r.width * r.height;
\n }
\n}
\n<\/PRE><\/BLOCKQUOTE>In the previous section, you made the RectangleArea<\/TT> class into an installed extension by placing the JAR file containing it into the lib\/ext<\/TT> directory of the JRE. By making it an installed extension, you enabled any application to use the RectangleArea<\/TT> class as if it were part of the Java platform.
\nIf you want to be able to use the RectangleArea<\/TT> class from an applet, the situation is a little different. Suppose, for example, that you have an applet,
AreaApplet<\/CODE>, that makes use of class RectangleArea<\/TT>: <\/P>
\nimport java.applet.Applet;
\nimport java.awt.*;<\/p>\npublic class AreaApplet extends Applet {
\n Rectangle r;<\/p>\npublic void init() {
\n int width = 10;
\n int height = 5;<\/p>\nr = new Rectangle(width, height);
\n }<\/p>\npublic void paint(Graphics g) {
\n g.drawString(“The rectangle’s area is ”
\n + RectangleArea.area(r), 10, 10);
\n }
\n}
\n<\/PRE><\/BLOCKQUOTE>This applet instantiates a 10 x<\/VAR> 5 rectangle and then displays the rectangle’s area by using the RectangleArea.area<\/TT> method.
\nHowever, you can’t assume that everyone who downloads and uses your applet is going to have the RectangleArea<\/TT> class available on their system, as an installed extension or otherwise. One way around that problem is to make the RectangleArea<\/TT> class available from the server side, and you can do that by using it as a download extension. <\/P>
\nTo see how that’s done, let’s assume that you’ve bundled
AreaApplet<\/CODE> in a JAR file called AreaApplet.jar<\/TT> and that the class RectangleArea<\/TT> is bundled in RectangleArea.jar<\/TT>. In order for RectangleArea.jar<\/TT> to be treated as a download extension, RectangleArea.jar<\/TT> must be listed in the Class-Path<\/TT> header in AreaApplet.jar<\/TT>‘s manifest. AreaApplet.jar<\/TT>‘s manifest might look like this, for example: <\/P>
\nManifest-Version: 1.0
\nClass-Path: RectangleArea.jar
\n<\/PRE><\/BLOCKQUOTE>The value of the Class-Path<\/TT> header in this manifest is RectangleArea.jar<\/TT> with no path specified, indicating that RectangleArea.jar<\/TT> is located in the same directory as the applet’s JAR file. <\/BLOCKQUOTE>
\nMore about the Class-Path Header<\/H3>
\nIf an applet or application uses more than one extension, you can list multiple URLs in a manifest. For example, the following is a valid header:
\nClass-Path: area.jar servlet.jar images\/
\n<\/PRE><\/BLOCKQUOTE>In the Class-Path<\/TT> header any URLs listed that don’t end with ‘\/<\/TT>‘ are assumed to be JAR files. URLs ending in ‘\/<\/TT>‘ indicate directories. In the preceding example, images\/<\/TT> might be a directory containing resources needed by the applet or the application.
\nNote that only one Class-Path<\/TT> header is allowed in a manifest file, and that each line in a manifest must be no more than 72 characters long. If you need to specify more class path entries than will fit on one line, you can extend them onto subsequent continuation lines. Begin each continuation line with two spaces. For example: <\/P>
\nClass-Path: area.jar servlet.jar monitor.jar datasource.jar
\n provider.jar gui.jar
\n<\/PRE><\/BLOCKQUOTE>A future release may remove the limitation of having only one instance of each header, and of limiting lines to only 72 characters.
\nDownload extensions can be “daisy chained”, meaning that the manifest of one download extension can have a Class-Path<\/TT> header that refers to a second extension, which can refer to a third extension, and so on. <\/P><\/BLOCKQUOTE>
\nInstalling Download Extensions<\/H3>
\nIn the above example, the extension downloaded by the applet is available only while the browser which loaded the applet is still running. However, applets can trigger installation of extensions, if additional information is included in the manifests of both the applet and the extension.
\nSince this mechanism extends the platform’s core API, its use should be judiciously applied. It is rarely appropriate for interfaces used by a single, or small set of applications. All visible symbols should follow reverse domain name and class hierarchy conventions. <\/P>
\nThe basic requirements are that both the applet and the extensions it uses provide version information in their manifests, and that they be signed. The version information allows Java Plug-in to ensure that the extension code has the version expected by the applet. For example, the AreaApplet<\/TT> could specify an areatest<\/TT> extension in its manifest: <\/P>
\nManifest-Version: 1.0
\nExtension-List: areatest
\nareatest-Extension-Name: area
\nareatest-Specification-Version: 1.1
\nareatest-Implementation-Version: 1.1.2
\nareatest-Implementation-Vendor-Id: com.sun
\nareatest-Implementation-URL: http:\/\/www.sun.com\/test\/area.jar
\n<\/PRE><\/BLOCKQUOTE>(Please note that there is no area.jar<\/TT> file at the above URL; this is just an example!) The manifest in area.jar<\/TT> would provide corresponding information:
\nManifest-Version: 1.0
\nExtension-Name: area
\nSpecification-Vendor: Sun Microsystems, Inc
\nSpecification-Version: 1.1
\nImplementation-Vendor-Id: com.sun
\nImplementation-Vendor: Sun Microsystems, Inc
\nImplementation-Version: 1.1.2
\n<\/PRE><\/BLOCKQUOTE>Both the applet and the extension must be signed, by the same signer. Signing the jar files will modify them in-place, providing more information in their manifest files. Signing helps ensure that only trusted code gets installed. A simple way to sign jar files is to first create a keystore, and then use that to hold certificates for the applet and extension. For example:
\nkeytool -genkey -dname “cn=Fred” -alias test -keypass mykeypass -storepass mystorepass -validity 180
\n<\/PRE><\/BLOCKQUOTE>Then the jar files can be signed:
\njarsigner -storepass mystorepass -keypass mykeypass AreaApplet.jar test
\njarsigner -storepass mystorepass -keypass mykeypass area.jar test
\n<\/PRE><\/BLOCKQUOTE>More information on keytool<\/TT>, jarsigner<\/TT>, and other security tools is at the Summary of Tools for the Java 2 Platform Security<\/A>.
\nHere is AreaDemo.html<\/TT>, which loads the applet and causes the extension code to be downloaded and installed: <\/P>
\n<html>
\n<body>
\n <applet code=”AreaApplet.class” archive=”AreaApplet.jar”\/>
\n<\/body>
\n<\/html>
\n<\/PRE><\/BLOCKQUOTE>When the page is loaded for the first time, the user is told that the applet requires installation of the extension. A subsequent dialog informs the user about the signed applet. Accepting both installs the extension in the lib\/ext<\/TT> folder of the JRE and runs the applet.
\nAfter restarting the web browser and load the same web page, only the dialog about the applet’s signer is presented, because area.jar<\/TT> is already installed. This is also true if AreaDemo.html<\/TT> is opened in a different web browser (assuming both browsers use the same JRE). <\/P><\/BLOCKQUOTE><\/DIV><\/p>\n","protected":false},"excerpt":{"rendered":"
Download Extensions Download extensions are sets of classes (and related resources) in JAR files. A JAR file’s manifest can contain headers that refer to one or more download extensions. The extensions can be referenced in one of two ways: by a Class-Path header by an Extension-List headerNote that at most one of each is allowed … Continue reading Download Extensions<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-380","post","type-post","status-publish","format-standard","hentry"],"_links":{"self":[{"href":"https:\/\/www.strongd.net\/index.php?rest_route=\/wp\/v2\/posts\/380","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.strongd.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.strongd.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.strongd.net\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.strongd.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=380"}],"version-history":[{"count":0,"href":"https:\/\/www.strongd.net\/index.php?rest_route=\/wp\/v2\/posts\/380\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.strongd.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=380"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.strongd.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=380"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.strongd.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=380"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}