Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-6543940

Exception thrown when signing a jarfile in java 1.5

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: P2
    • Resolution: Fixed
    • Affects Version/s: 5.0u10
    • Fix Version/s: 5.0u14
    • Component/s: security-libs
    • Labels:
    • Subcomponent:
    • Resolved In Build:
      b01
    • CPU:
      sparc
    • OS:
      solaris_10

      Backports

        Description

        The ISV is getting the exception when signing their jar files (attached).
        It can be duplicated on both Windows and Solaris SPARC.

        java version "1.5.0_10"

        1. created a keystore in Java 1.5.
        keytool -genkey -alias jim -keystore jimstore

        2. sign the Test_InstallLogUtil.jar
        jarsigner -keystore jimstore -signedjar sTest_InstallLogUtil.jar
        Test_InstallLogUtil.jar jim

        3. update the signed jar file
        jar -uvf sTest_InstallLogUtil.jar Main.jar

        4. sign the updated jar file again
        jarsigner -keystore jimstore -signedjar ssTest_InstallLogUtil.jar
        sTest_InstallLogUtil.jar jim

        5. verify the newer signed jarfile
        jarsigner -verify -verbose -keystore jimstore ssTest_InstallLogUtil.jar

        jarsigner: java.lang.SecurityException: Invalid signature file digest
        for Manifest main attributes

          Attachments

            Issue Links

              Activity

                People

                Assignee:
                weijun Weijun Wang
                Reporter:
                duke J. Duke (Inactive)
                Votes:
                0 Vote for this issue
                Watchers:
                0 Start watching this issue

                  Dates

                  Created:
                  Updated:
                  Resolved:
                  Imported:
                  Indexed: