itweb-settings(1)

πŸ“¦
version 1.8.8 Β· 8 versions
, in epel 9

✨ itweb-settings(1) β€” General Commands Manual ✨

Okay bestie, this is the manual page for itweb-settings, and it’s literally your command line + GUI bestie for tweaking javaws and browser-plugin settings. No cap.

🌸 NAME 🌸

itweb-settings β€” view and modify settings for javaws and the browser plugin.

πŸ¦‹ SYNOPSIS πŸ¦‹

Two moods, bestie:

itweb-settings
itweb-settings command arguments

πŸ’– DESCRIPTION πŸ’–

itweb-settings is a command line and a GUI program to modify and edit settings used by the IcedTea-Web implementation of javaws and the browser plugin. The way that it can do both GUI and command line? Obsessed.

If you run it with no arguments, it starts up a GUI. Otherwise, it tries to do what is specified in the argument.

The command line lets you quickly search, make a copy of, and modify specific settings without having to hunt through a UI. Iconic behavior, honestly.

πŸŽ€ DESCRIPTION πŸŽ€

Here’s the command-line menu, and yes, every single one is here β€” no skips, periodt:

  • -check name β€” Checks that all the current settings have valid values. (No argument expected.)
  • -get name β€” Shows the value of the specified settings. (Expected one or more arguments.)
  • -headless β€” Disables the download window and other UIs. (No argument expected.)
  • -help β€” Prints out information about the supported command and basic usage. It can also take a parameter, and then it prints detailed help for this command. (No argument expected.)
  • -info name β€” Shows additional information about the named settings. Includes a description, the current value, the possible values, and the source of the setting. (Expected one or more arguments.)
  • -list β€” Shows a list of all the IcedTea-Web settings and their current values. (No argument expected.)
  • -reset name β€” Resets the specified settings to their original value. (Expected one or more arguments.)
  • -reset all β€” Resets all settings to their original values. (No argument expected.)
  • -set name value β€” Sets the settings to the new value specified, if it is an appropriate value. (Expected an even number of arguments with param=value as a valid argument.)
  • -verbose β€” Enable verbose output. (No argument expected.)

πŸ”₯ EXAMPLES πŸ”₯

Bestie, examples that ate:

itweb-settings

Show the GUI editor.

itweb-settings  -reset deployment.proxy.type

Resets the value of deployment.proxy.type setting.

🌈 Known properties (key and default value): 🌈

This is the big list β€” key and default value, no skips:

  • deployment.background.threads.count β€” default 3 (Possible: are in range 1 to 16 (inclusive)).
  • deployment.browser.path β€” default null. Possible: set a path to a browser or any command that launches a URL. If it’s not set, the default browser is used. If the default browser isn’t available, you’ll be prompted to provide a URL consumer. Eg: firefox, or (Windows) rundll32 url.dll,FileProtocolHandler, microsoft-edge, (Mac) safari, xdg-open (Linux), or commands like those. In headless mode you can use wget, curl, or lynx. It can also be javaws itself to launch another jnlp. You can set your custom browser via the deployment.browser.path property. The $BROWSER environment variable serves the same purpose. You can use the keyword INTERNAL-HTML to launch the internal browser, but be warned: it is terrible. Use ALWAYS-ASK to enforce a prompt each time instead of using defaults.
  • deployment.cache.jarcompression β€” default 0 (Possible: are in range 0 to 10 (inclusive)).
  • deployment.cache.max.size β€” default -1 (Possible: are in range -1 to 2,147,483,647 (inclusive)).
  • deployment.console.startup.mode β€” default HIDE (Possible: [DISABLE, HIDE, SHOW, SHOW_PLUGIN_ONLY, SHOW_JAVAWS_ONLY]).
  • deployment.enable.cache.fsync β€” default false (Possible: are true or false).
  • deployment.headless.ignore β€” default false (Possible: are true or false).
  • deployment.https.noenforce β€” default false (Possible: are true or false).
  • deployment.javapi.cache.enabled β€” default false (Possible: are true or false).
  • deployment.javaws.associations β€” default 2 (Possible: are in range 0 to 3 (inclusive)).
  • deployment.javaws.autodownload β€” default false (Possible: are true or false).
  • deployment.javaws.installURL β€” default null (Possible: include any valid url (eg. http://icedtea.classpath.org/hg/)).
  • deployment.javaws.shortcut β€” default ASK_IF_HINTED (Possible: [ALWAYS, ALWAYS_IF_HINTED, ASK_USER, ASK_IF_HINTED, NEVER]).
  • deployment.javaws.update.timeout β€” default 500 (Possible: are in range 0 to 10,000 (inclusive)).
  • deployment.jnlpclassloader.strict β€” default true (Possible: are true or false).
  • deployment.jre.dir β€” default null.
  • deployment.launcher.rust.bootcp.add β€” default null. Possible: Rust native launchers only! CP and XBootCP properties are space separated members of bootcp/cp to be removed or added. eg ...cp.add=/usr/java/rhino.jar /usr/java/scary.jar will add those two jars to cp. Eg: ...bootcp.remove=rhino.jar tagsoup.jar will remove those two jars no meter of path. Removal is done first.
  • deployment.launcher.rust.bootcp.remove β€” default: (nothing shown). Possible: Rust native launchers only! CP and XBootCP properties are space separated members of bootcp/cp to be removed or added. eg ...cp.add=/usr/java/rhino.jar /usr/java/scary.jar will add those two jars to cp. Eg: ...bootcp.remove=rhino.jar tagsoup.jar will remove those two jars no meter of path. Removal is done first.
  • deployment.launcher.rust.cp.add β€” default: (nothing shown). Possible: Rust native launchers only! CP and XBootCP properties are space separated members of bootcp/cp to be removed or added. eg ...cp.add=/usr/java/rhino.jar /usr/java/scary.jar will add those two jars to cp. Eg: ...bootcp.remove=rhino.jar tagsoup.jar will remove those two jars no meter of path. Removal is done first.
  • deployment.launcher.rust.cp.remove β€” default: (nothing shown). Possible: Rust native launchers only! CP and XBootCP properties are space separated members of bootcp/cp to be removed or added. eg ...cp.add=/usr/java/rhino.jar /usr/java/scary.jar will add those two jars to cp. Eg: ...bootcp.remove=rhino.jar tagsoup.jar will remove those two jars no meter of path. Removal is done first.
  • deployment.log β€” default false (Possible: are true or false).
  • deployment.log.file β€” default false (Possible: are true or false).
  • deployment.log.file.clientapp β€” default true (Possible: are true or false).
  • deployment.log.file.legacylog β€” default false (Possible: are true or false).
  • deployment.log.headers β€” default false (Possible: are true or false).
  • deployment.log.stdstreams β€” default true (Possible: are true or false).
  • deployment.log.system β€” default true (Possible: are true or false).
  • deployment.manifest.attributes.check β€” default ALL (Possible: (Values that can be used alone only): [ALL, NONE] (Values that can be used in combination separated by the delimiter "," with no space expected ): [ALAC, CODEBASE, ENTRYPOINT, PERMISSIONS, TRUSTED]).
  • deployment.max.urls.download.indicator β€” default 16 (Possible: are in range 1 to 1,024 (inclusive)).
  • deployment.plugin.jvm.arguments β€” default null.
  • deployment.proxy.auto.config.url β€” default null (Possible: include any valid url (eg. http://icedtea.classpath.org/hg/)).
  • deployment.proxy.bypass.list β€” default null.
  • deployment.proxy.bypass.local β€” default null.
  • deployment.proxy.ftp.host β€” default null.
  • deployment.proxy.ftp.port β€” default null.
  • deployment.proxy.http.host β€” default null.
  • deployment.proxy.http.port β€” default null.
  • deployment.proxy.https.host β€” default null.
  • deployment.proxy.https.port β€” default null.
  • deployment.proxy.override.hosts β€” default null.
  • deployment.proxy.same β€” default false (Possible: are true or false).
  • deployment.proxy.socks.host β€” default null.
  • deployment.proxy.socks.port β€” default null.
  • deployment.proxy.type β€” default 3 (Possible: are in range -1 to 3 (inclusive)).
  • deployment.security.askgrantdialog.notinca β€” default true (Possible: are true or false).
  • deployment.security.askgrantdialog.show β€” default true (Possible: are true or false).
  • deployment.security.expired.warning β€” default true (Possible: are true or false).
  • deployment.security.itw.ignorecertissues β€” default false (Possible: are true or false).
  • deployment.security.jsse.hostmismatch.warning β€” default true (Possible: are true or false).
  • deployment.security.level β€” default null (Possible: DENY_ALL DENY_UNSIGNED ASK_UNSIGNED ALLOW_UNSIGNED).
  • deployment.security.notinca.warning β€” default true (Possible: are true or false).
  • deployment.security.sandbox.awtwarningwindow β€” default true (Possible: are true or false).
  • deployment.security.sandbox.jnlp.enhanced β€” default true (Possible: are true or false).
  • deployment.security.trusted.policy β€” default null (Possible: include an absolute path to a file or directory).
  • deployment.small.size.override.height β€” default 600 (Possible: are in range -9,999 to 9,999 (inclusive)).
  • deployment.small.size.override.width β€” default 800 (Possible: are in range -9,999 to 9,999 (inclusive)).
  • deployment.small.size.treshold β€” default 10 (Possible: are in range 0 to 1,000 (inclusive)).
  • deployment.system.cachedir β€” default null (Possible: include an absolute path to a file or directory).
  • deployment.system.config β€” default null (Possible: include any valid url (eg. http://icedtea.classpath.org/hg/)).
  • deployment.system.config.mandatory β€” default false (Possible: are true or false).
  • deployment.system.security.cacerts β€” default $JAVA_HOME/lib/security/cacerts (Possible: include an absolute path to a file or directory).
  • deployment.system.security.jssecacerts β€” default $JAVA_HOME/lib/security/jssecacerts (Possible: include an absolute path to a file or directory).
  • deployment.system.security.policy β€” default null (Possible: include any valid url (eg. http://icedtea.classpath.org/hg/)).
  • deployment.system.security.trusted.certs β€” default $JAVA_HOME/lib/security/trusted.certs (Possible: include an absolute path to a file or directory).
  • deployment.system.security.trusted.clientautcerts β€” default $JAVA_HOME/lib/security/trusted.clientcerts (Possible: include an absolute path to a file or directory).
  • deployment.system.security.trusted.jssecerts β€” lives at $JAVA_HOME/lib/security/trusted.jssecerts (you can also point it at an absolute path to a file or a directory, your call bestie)
  • deployment.user.cachedir β€” default is $XDG_CACHE_HOME/icedtea-web/cache (again, an absolute path to a file or directory is fair game)
  • deployment.user.locksdir β€” default $TMP/$USER/netx/locks (absolute path to a file or directory = totally valid)
  • deployment.user.logdir β€” default $XDG_CONFIG_HOME/icedtea-web/log (absolute path to a file or directory, yes queen)
  • deployment.user.pcachedir β€” default $XDG_CACHE_HOME/icedtea-web/pcache (absolute path to a file or directory works)
  • deployment.user.runningfile β€” default $TMP/$USER/netx/locks/netx_running (absolute path to a file or directory, slay)
  • deployment.user.security.policy β€” default $XDG_CONFIG_HOME/icedtea-web/security/java.policy (this one's flexible: include any valid url, e.g. http://icedtea.classpath.org/hg/)
  • deployment.user.security.trusted.cacerts β€” default $XDG_CONFIG_HOME/icedtea-web/security/trusted.cacerts (absolute path to a file or directory)
  • deployment.user.security.trusted.certs β€” default $XDG_CONFIG_HOME/icedtea-web/security/trusted.certs (absolute path to a file or directory)
  • deployment.user.security.trusted.clientauthcerts β€” default $XDG_CONFIG_HOME/icedtea-web/security/trusted.clientcerts (absolute path to a file or directory)
  • deployment.user.security.trusted.jssecacerts β€” default $XDG_CONFIG_HOME/icedtea-web/security/trusted.jssecacerts (absolute path to a file or directory)
  • deployment.user.security.trusted.jssecerts β€” default $XDG_CONFIG_HOME/icedtea-web/security/trusted.jssecerts (absolute path to a file or directory)
  • deployment.user.tmp β€” default $XDG_CACHE_HOME/icedtea-web/tmp (absolute path to a file or directory, we been knew)

🌸 FILES 🌸

okay so here's the map of where everything lives on your disk, bookmark this fr:

  • $JAVA_HOME/lib/deployment.config β€” the java-global deployment properties file. Heads up: it may be affected by deployment.jre.dir.
  • $XDG_CACHE_HOME/icedtea-web/cache β€” holds the cached runtime entries. Controlled by deployment.user.cachedir.
  • $XDG_CACHE_HOME/icedtea-web/cache/recently_used β€” extra info about the items sitting in cache ✨
  • $XDG_CACHE_HOME/icedtea-web/pcache β€” holds your saved application data. Controlled by deployment.user.pcachedir.
  • $XDG_CACHE_HOME/icedtea-web/tmp β€” holds temporary runtime files. Controlled by deployment.user.tmp.
  • $XDG_CONFIG_HOME/icedtea-web/.appletTrustSettings β€” the file that's responsible for various actions on applets and apps based on their codebase, based on users actions. Very "the vibes decide" of it.
  • $XDG_CONFIG_HOME/icedtea-web/deployment.properties β€” the user's main deployment properties file, the big one πŸ’…
  • $XDG_CONFIG_HOME/icedtea-web/generated_jnlps β€” where jnlp files generated from html pages for javaws applications desktop/menu launchers icons get stored πŸ‘‘
  • $XDG_CONFIG_HOME/icedtea-web/icons β€” where the icons of javaws applications desktop/menu launchers icons get stored πŸŽ€
  • $XDG_CONFIG_HOME/icedtea-web/log β€” contains the file-log files (if enabled): itw-cplugin-date_time.log for the native part of the plugin, and itw-javantx-date_time.log for everything else. Controlled by deployment.user.logdir.
  • $XDG_DATA_HOME/applications/javaws β€” a subdirectory in the user's menus space, for placing custom menu shortcuts 🧚
  • {%WINDIR/Sun/Java or /etc/.java}/deployment/.appletTrustSettings β€” the file responsible for various actions on applets and apps based on their codebase, but this time based on admins actions. Different authority, same drama.
  • {%WINDIR/Sun/Java or /etc/.java}/deployment/deployment.config β€” the global deployment config file.
Also: where $XDG_CONFIG_DIR, $XDG_CACHE_DIR and $XDG_RUNTIME_DIR are set as ~/.config, ~/.cache and /tmp or /var/tmp if not set. So like, if you never set them, that's what you get. Noted bestie 🫢

πŸ’€ BUGS πŸ’€

There aren't any known bugs. (Iconic behaviour, honestly.) But if you do come across one, please file it at:

And listen β€” please run in debug mode (-verbose switch, or the itw-settings setting, or the ICEDTEAPLUGIN_DEBUG variable set to true) and include that output (best is from java console) along with a URL to the jnlp or html file (or the jnlp/html file or application itself) when filing out the bug report. Give the maintainers the whole picture, no crumbs πŸ˜­πŸ™

πŸ‘‘ AUTHOR πŸ‘‘

The following people have made contibutions to this project. Please keep this list in alphabetical order. (Their words, and we respect the alphabet in this house.)

  • Lillian Angel <langel@redhat.com>
  • Andrew Azores <aazores@redhat.com>
  • Deepak Bhole <dbhole@redhat.com>
  • Laurent BourgΓ¨s <bourges.laurent@gmail.com>
  • Adam Buchta <adbuch7@gmail.com>
  • Ricardo MartΓ­n Camarero <rickyepoderi@yahoo.es>
  • Marcin Cieslak <marcin.cieslak@gmail.com>
  • Danesh Dadachanji <ddadacha@redhat.com>
  • Adam Domurad <adomurad@redhat.com>
  • Lukasz Dracz <ldracz@redhat.com>
  • Thomas Fitzsimmons <fitzsim@redhat.com>
  • Olesya Gerasimenko <gammaray@basealt.ru>
  • MichaΕ‚ GΓ³rny <mgorny@gentoo.org>
  • Mark Greenwood <mark@dcs.shef.ac.uk>
  • Tereza Hlavackova <hlavackova.tereza@gmail.com>
  • Lars Herschke <lhersch@dssgmbh.de>
  • Peter Hatina <phatina@redhat.com>
  • Andrew John Hughes <ahughes@redhat.com>
  • Jie Kang <jkang@redhat.com>
  • Alex Kashchenko <akashche@redhat.com>
  • Matthias Klose <doko@ubuntu.com>
  • Alexandr Kolouch <skolnag@gmail.com>
  • Jan Kmetko <jan.kmetko.ml@gmail.com>
  • Francis Kung <fkung@redhat.com>
  • Denis Lila <dlila@redhat.com>
  • DJ Lucas <dj@lucasit.com>
  • Omair Majid <omajid@redhat.com>
  • Jon A. Maxwell <jmaxwell@users.sourceforge.net>
  • Thomas Meyer <thomas@m3y3r.de>
  • Kurt Miller <kurt@intricatesoftware.com>
  • Saad Mohammad <smohammad@redhat.com>
  • Martin Olsson <martin@minimum.se>
  • Stefan Ring <stefan@complang.tuwien.ac.at>
  • Ville SkyttΓ€ <ville.skytta@iki.fi>
  • Fridrich Strba <fridrich.strba@suse.com>
  • Andrew Su <asu@redhat.com>
  • Joshua Sumali <jsumali@redhat.com>
  • Joel Tesdall <jtesdall@mapcon.com>
  • Michal Vala <mvala@redhat.com>
  • Jiri Vanek <jvanek@redhat.com>
  • TomΓ‘Ε‘ Votava <tomcacolca@gmail.com>
  • Mark Wielaard <mark@klomp.org>
  • Jacob Wisor <gitne@excite.co.jp>
  • Man Lung Wong <mwong@redhat.com>

This project also includes code from the following projects:

πŸ¦‹ SEE ALSO πŸ¦‹

icedtea-web(1) javaws(1) icedtea-web-plugin(1) itweb-settings(1) policyeditor(1) policytool(1) java(1)

and that's the whole page, bestie πŸŽ€ you just read the entire itweb-settings(1) manual like a champ. this lil beauty is icedtea-web (fedora-8.el9-x86_64), dated 2 May 2025 β€” go forth and configure responsibly πŸ’–βœ¨

πŸ“¦ where this page comes from
  • epel 9: icedtea-web 1.8.8-8.el9 Β· GPL-2.0-only AND GPL-2.0-only WITH Classpath-exception-2.0 AND GPL-2.0-or-later AND GPL-2.0-or-later WITH Classpath-exception-2.0 AND LGPL-2.1-or-later AND Zlib
  • πŸ’– girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on : a language model's rewrite of the original, under its terms