Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8154131

CertificateException: Could not verify signing in resource

    Details

    • Subcomponent:
    • Introduced In Version:
    • CPU:
      x86
    • OS:
      os_x

      Description

      FULL PRODUCT VERSION :
      JRE 8 update 77

      ADDITIONAL OS VERSION INFORMATION :
      Occurs on Windows and OS X

      A DESCRIPTION OF THE PROBLEM :
      execute a JNLP file that worked in Java 8 update 73.
      Application downloads
      Before it can launch though the following exception is thrown.

      java.security.cert.CertificateException: Could not verify signing in resource: http://download.mysite.com/Tanzanite/lib/core/navigation-default-01.jar
      at com.sun.deploy.security.TrustDecider.ensureAllJarEntriesSigned(Unknown Source)
      at com.sun.deploy.security.TrustDecider.getValidationState(Unknown Source)
      at com.sun.deploy.security.TrustDecider.validateChain(Unknown Source)
      at com.sun.deploy.security.TrustDecider.isAllPermissionGrantedInt(Unknown Source)
      at com.sun.deploy.security.TrustDecider.isAllPermissionGranted(Unknown Source)
      at com.sun.deploy.security.DeployURLClassLoader.getResourcePermission(Unknown Source)
      at com.sun.deploy.security.DeployURLClassLoader.getResourceAsStream(Unknown Source)
      at java.util.ResourceBundle$Control$1.run(ResourceBundle.java:2677)
      at java.util.ResourceBundle$Control$1.run(ResourceBundle.java:2662)
      at java.security.AccessController.doPrivileged(Native Method)
      at java.util.ResourceBundle$Control.newBundle(ResourceBundle.java:2661)
      at java.util.ResourceBundle.loadBundle(ResourceBundle.java:1501)
      at java.util.ResourceBundle.findBundle(ResourceBundle.java:1465)
      at java.util.ResourceBundle.findBundle(ResourceBundle.java:1419)
      at java.util.ResourceBundle.findBundle(ResourceBundle.java:1419)
      at java.util.ResourceBundle.getBundleImpl(ResourceBundle.java:1361)
      at java.util.ResourceBundle.getBundle(ResourceBundle.java:773)
      at com.sb.core.client.navigation.controller.contextmanager.ContextManager.<init>(ContextManager.java:62)
      at com.sb.core.client.navigation.controller.contextmanager.ContextManager.getInstance(ContextManager.java:76)
      at com.sb.core.client.navigation.flow.NavigationConfigurationLoader.<init>(NavigationConfigurationLoader.java:35)
      at com.sb.core.client.navigation.main.Launcher$1.run(Launcher.java:104)
      at java.awt.event.InvocationEvent.dispatch(InvocationEvent.java:311)
      at java.awt.EventQueue.dispatchEventImpl(EventQueue.java:756)
      at java.awt.EventQueue.access$500(EventQueue.java:97)
      at java.awt.EventQueue$3.run(EventQueue.java:709)
      at java.awt.EventQueue$3.run(EventQueue.java:703)
      at java.security.AccessController.doPrivileged(Native Method)
      at java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(ProtectionDomain.java:76)
      at java.awt.EventQueue.dispatchEvent(EventQueue.java:726)
      at java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatchThread.java:201)
      at java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchThread.java:116)
      at java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:105)
      at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:101)
      at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:93)
      at java.awt.EventDispatchThread.run(EventDispatchThread.java:82)
      Caused by: com.sun.deploy.net.JARSigningException: Could not verify signing in resource: http://download.mysite.com/Tanzanite/lib/core/navigation-default-01.jar
      ... 35 more


      REGRESSION. Last worked in version 8u73

      ADDITIONAL REGRESSION INFORMATION:
      jre 8 update 77

      STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
      Launch a signed jnlp file that worked in update 73 using the latest update 77


      EXPECTED VERSUS ACTUAL BEHAVIOR :
      EXPECTED -
      Excepted that the application is downloaded and starts up correctly.
      ACTUAL -
      Application is downloaded, however when the first class attempts to load resources a security exception is thrown as per the above.

      ERROR MESSAGES/STACK TRACES THAT OCCUR :
      java.security.cert.CertificateException: Could not verify signing in resource: http://download.mysite.com/Tanzanite/lib/core/navigation-default-01.jar
      at com.sun.deploy.security.TrustDecider.ensureAllJarEntriesSigned(Unknown Source)
      at com.sun.deploy.security.TrustDecider.getValidationState(Unknown Source)
      at com.sun.deploy.security.TrustDecider.validateChain(Unknown Source)
      at com.sun.deploy.security.TrustDecider.isAllPermissionGrantedInt(Unknown Source)
      at com.sun.deploy.security.TrustDecider.isAllPermissionGranted(Unknown Source)
      at com.sun.deploy.security.DeployURLClassLoader.getResourcePermission(Unknown Source)
      at com.sun.deploy.security.DeployURLClassLoader.getResourceAsStream(Unknown Source)
      at java.util.ResourceBundle$Control$1.run(ResourceBundle.java:2677)
      at java.util.ResourceBundle$Control$1.run(ResourceBundle.java:2662)
      at java.security.AccessController.doPrivileged(Native Method)
      at java.util.ResourceBundle$Control.newBundle(ResourceBundle.java:2661)
      at java.util.ResourceBundle.loadBundle(ResourceBundle.java:1501)
      at java.util.ResourceBundle.findBundle(ResourceBundle.java:1465)
      at java.util.ResourceBundle.findBundle(ResourceBundle.java:1419)
      at java.util.ResourceBundle.findBundle(ResourceBundle.java:1419)
      at java.util.ResourceBundle.getBundleImpl(ResourceBundle.java:1361)
      at java.util.ResourceBundle.getBundle(ResourceBundle.java:773)
      at com.sb.core.client.navigation.controller.contextmanager.ContextManager.<init>(ContextManager.java:62)
      at com.sb.core.client.navigation.controller.contextmanager.ContextManager.getInstance(ContextManager.java:76)
      at com.sb.core.client.navigation.flow.NavigationConfigurationLoader.<init>(NavigationConfigurationLoader.java:35)
      at com.sb.core.client.navigation.main.Launcher$1.run(Launcher.java:104)
      at java.awt.event.InvocationEvent.dispatch(InvocationEvent.java:311)
      at java.awt.EventQueue.dispatchEventImpl(EventQueue.java:756)
      at java.awt.EventQueue.access$500(EventQueue.java:97)
      at java.awt.EventQueue$3.run(EventQueue.java:709)
      at java.awt.EventQueue$3.run(EventQueue.java:703)
      at java.security.AccessController.doPrivileged(Native Method)
      at java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(ProtectionDomain.java:76)
      at java.awt.EventQueue.dispatchEvent(EventQueue.java:726)
      at java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatchThread.java:201)
      at java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchThread.java:116)
      at java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:105)
      at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:101)
      at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:93)
      at java.awt.EventDispatchThread.run(EventDispatchThread.java:82)
      Caused by: com.sun.deploy.net.JARSigningException: Could not verify signing in resource: http://download.mysite.com/Tanzanite/lib/core/navigation-default-01.jar
      ... 35 more


      REPRODUCIBILITY :
      This bug can be reproduced always.

      CUSTOMER SUBMITTED WORKAROUND :
      Switch off the caching of temporary internet files completely or downgrade to previous version.

      SUPPORT :
      YES

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                nnatu Nakul Natu (Inactive)
                Reporter:
                webbuggrp Webbug Group
              • Votes:
                0 Vote for this issue
                Watchers:
                4 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: