Java and Routegadget

[roadrunner]

Having just updated Firefox and Java, I find that every time I use the Routegadget site, I get a warning box like the one below (previously, if you accepted Java for, say, BKO routegadget then you didn't get the warning again for that club's events).

Warning dialog box

JavaWarning.jpg (40.86 KiB) Viewed 7236 times

Most worrying though is the text saying that applets like this are going to be blocked in a future Java release. Is there any chance of getting the Routegadget applet signed, which ought to overcome the problem?

[AndyC]

I've been getting the same message for a while.

[roadrunner]

Perhaps it has been saying that for a while and I didn't notice - or maybe I was just a bit slow updating Java.

[denbydale]

I've been getting the same message for a while.

Likewise

[andypat]

Me too - doesnt seem to casue any probleems other than having to tick every time.
Doesnt seem to affect anythign other than routegadget

[Paul Frost]

The problems with running Java are increasing as security in newer operating systems and browsers gets tighter. Java applets running in a browser have been the delivery method for a small number of successful exploits.

I am unsure of the long term future of routegadget.co.uk as these difficulties affect more and more people. At the moment it is a minority that can't use RouteGadget due to Java issues, but I suspect that number to increase as people upgrade to newer equipment. There is also the problem of it not working on smartphones and tablets, both of which have a massively increasing share of the "browsing" market.

I have been holding off asking for further financial contributions from clubs whilst I try and gaze into my crystal ball and work out if I can guarantee it will still work in 2 years time. With over 70 clubs and organisations using the service it's a tough decision to make. I need the contributions to keep offering the service but don't want to take money knowing that it might not be usable in the near future.

The Routegadget developer Jarkko Ryyppö,hasn't updated the application for a few years and has indicated that he doesn't plan to either. One consequence of this is that the new IOF XML standard export formats are not compatible by RG. So be aware that the latest version of Ocad will export course info in the new format, so you need to convert it to an older version. The same may apply to XML results output from event management software in the future.

I still haven't seen any other web application that offers what RouteGadget does and is compatible with the newer devices and doesn't use Java. If you know of anything that does offer this sort of functionality let me know.

RouteGadget isn't the only web application to have this problem, TracTrac GPS tracking uses Java and so doesn't work if you have Java disabled on your PC, you just get a blank screen and no warning about needing Java.

[AndyC]

Paul - I for one appreciate Routegadget so if you can keep it going please do so and i'm sure resonable costs will be covered by the clubs

[roadrunner]

I second Andy's comments - it's a very useful tool indeed. Since the developer isn't planning to change the code, would getting it signed be that painful or costly (since it would be a one-off)? I know it wouldn't solve all the problems, but it would avoid the situation that's likely to happen where an automatic Java update stops it working for good. I don't know what a suitable certificate costs, but spread amongst all the clubs using it I suspect it would be pretty reasonable.

[Paul Frost]

I'm not a Java programmer and after a quick search for how to get an applet signed I lost the will to live.
If anyone out there can tell me exactly what needs doing and how much it costs I'd appreciate it. I'm not sure if it's relevant, but every club has it's own install on a sub-domain, so would every single one need to be signed?

[roadrunner]

I'm not sure if it's relevant, but every club has it's own install on a sub-domain, so would every single one need to be signed?

Judging by how it worked before the last Java update (where you could say "always allow this applet to run") I think the answer is yes - but my understanding is that they could all be copies of the same signed file, though I'm not an expert either so that could be wrong.

[slang]

I don't think the subject name of the signing certificate has to match the sub-domain name; so you only need to purchase one certificate from a Certificate Authority (such as Entrust, Verisign or GoDaddy). Prices seem to be about £150 per year, depending on how long the certificate is valid.

The code deployed to each sub-domain would need to be signed using the purchased certificate. I've only signed PowerShell scripts, unfortunately I don't know the steps for Java applets.

The following instructions from GlobalSign https://www.globalsign.co.uk/resources/SignJavaCodeApplets.pdf seems to a reasonable step-by-step guide for signing JAR files.

[roadrunner]

Does anyone know whether today's massive Java update breaks Routegadget? I don't want to download it unless I'm sure it doesn't, but the information on the website about what it does is pretty impenetrable: they seem to take the attitude that, if you're a mere user, you don't need to know, just install it.

[frostbite]

I updated Java this week without thinking about it - now at version 7 update 45. Routegadget seems to be working fine - viewing routes and animations anyway. I haven't tried entering a route because I haven't done any courses lately.

Edit : entering a route also works fine. I hijacked somebody elses route to give it a try.

[drobin]

I had to update JAVA before RG would let me enter a route! (ie TVOC at Penn last week) .

[brooner]

I still haven't seen any other web application that offers what RouteGadget does and is compatible with the newer devices and doesn't use Java. If you know of anything that does offer this sort of functionality let me know.

They're working on something here in Oz, tied into the Eventor event/results management system (which is also rather decent, take note BO), and early iterations look pretty neat.