Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8184993

Jar file verification failing with SecurityException: digest missing xxx

    Details

      Backports

        Description

        Behavioural change in 8u141 is causing some jar files to fail verification.

        Example stacktrace :

        com.sun.deploy.net.JARSigningException: Could not verify signing in resource: (http://localhost:8080/webstart/lib/l2fprod-0.0.1.jar, 55873)
        at com.sun.deploy.security.JarVerifier.authenticateJarEntry(Unknown Source)
        at com.sun.deploy.security.EnhancedJarVerifier.validate(Unknown Source)
        at com.sun.deploy.cache.CacheEntry.processJar(Unknown Source)
        at com.sun.deploy.cache.CacheEntry.access$2700(Unknown Source)
        at com.sun.deploy.cache.CacheEntry$7.run(Unknown Source)
        at java.security.AccessController.doPrivileged(Native Method)
        at com.sun.deploy.cache.CacheEntry.writeFileToDisk(Unknown Source)
        at com.sun.deploy.cache.CacheEntry.writeFileToDisk(Unknown Source)
        at com.sun.deploy.cache.Cache.downloadResourceToTempFile(Unknown Source)
        ...

        ================================
        WrappedException:
        ================================
        java.lang.SecurityException: digest missing for com/l2fprod/common
        at sun.security.util.ManifestEntryVerifier.verify(Unknown Source)
        at java.util.jar.JarVerifier.processEntry(Unknown Source)
        at java.util.jar.JarVerifier.update(Unknown Source)
        at java.util.jar.JarVerifier$VerifierStream.<init>(Unknown Source)
        at java.util.jar.JarFile.getInputStream(Unknown Source)
        at com.sun.deploy.security.JarVerifier.authenticateJarEntry(Unknown Source)
        at com.sun.deploy.security.EnhancedJarVerifier.validate(Unknown Source)
        at com.sun.deploy.cache.CacheEntry.processJar(Unknown Source)
        at com.sun.deploy.cache.CacheEntry.access$2700(Unknown Source)
        at com.sun.deploy.cache.CacheEntry$7.run(Unknown Source)
        at java.security.AccessController.doPrivileged(Native Method)
        at com.sun.deploy.cache.CacheEntry.writeFileToDisk(Unknown Source)
        at com.sun.deploy.cache.CacheEntry.writeFileToDisk(Unknown Source)
        at com.sun.deploy.cache.Cache.downloadResourceToTempFile(Unknown Source)
        ...

          Issue Links

            Activity

            No work has yet been logged on this issue.

              People

              • Assignee:
                igerasim Ivan Gerasimov
                Reporter:
                coffeys Sean Coffey
              • Votes:
                0 Vote for this issue
                Watchers:
                6 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: