BouncyCastle+Verify Signature

Hi all,
I am currently developing an application for a mobile phone that needs to check a signature received in an xml message. The problem is that I'm using bouncycastle to check that signature, but I am not using bouncycastle for signing the message (I'm just using the security packages that come with J2SE 1.4.2).
Are there any differences in the way the signatures are processed by J2SE and BouncyCastle for J2ME?
I am using SHA-1 to create a digest of the message and then sign it using an RSA key!
Thanks in advance,
Joao!

Hi Joao!,
Bouncycastle is created according specific rfc's. These rfc's describe how things should be used. If your other product uses the same rfc's you may say they do the same thing. If not, i wouldn/'t be so sure. Look at http://www.bouncycastle.org/docs/mdocs1.4/index.html. It say's bouncycastle they use rfc 3369 (formely 2630). Check your other product if they are using the same rfc.
Good luck,
Remy de Boer
Oh, i've read somwhere that rfc 3369 is compatible with rfc 2630. If somebody say's otherwise please respond.

Similar Messages

Itunes will not update. I get an message saying that it cannot verify signature and it will not install, itunes will not update. I get an message saying that it cannot verify signature and it will not install

iTunes will not update. I get an error message saying that it cannot verify signature and it will be unable to install.

Yeah me too try going through the apple website in (firefox) and download iTunes there. Currently that's what I'm doing.

Digitally Verified Signature Fields After Saving

I am using Acrobat 9. I am creating a PDF with a whole slew of editable fields. Once the PDF is done I need to be able to email it to several people who need to be able to fill it out and save it (so that they can upload it to a website for me). I have figured this part of it out thanks to someone else asking the same question. HOWEVER... when I save it as "Extend Form Fill-In and Save In Adobe Reader" and email it to my co-worker she is able to open the doc and edit the fields and save it... all except for the Verified Signature Fields, which are VERY important to this particular doc as it is a contract.
Does anybody have any suggestions or ideas? I'm in a pickle and needing to get this doc done very soon. Thanks in advance.

Thanks for your reply. I remember getting a prompt to add the password after certain actions so that is why I thought it could be the same with the printing if the option had not been disabled.
From my point of view, I set security options for others not to be able to modify/do certain actions on my doc, but I would expect I would continue being able to do so...this way securing a document is also limiting myself as the author of the document.
Of course the inconvenience prior to signing turns into impossibility when digitally signed as you say...
I can cope with an inconvenience as I understand the way it has been thought (similar to when you protect an excel sheet or anything similar) but I also think it would be useful to find an alternative solution seeing the constraints added when the doc is signed. Printing out a document does not modify the original document...so it should be allowed (of course, in order to ascertain its validity, the printed copy would need to be checked against the digitally signed one (similar to what we need to do if we copy a document in paper...it needs to be checked against the original or even get attested).
Thanks again!

Error verifying signature

I am getting the following error while invoking the verify signature operation of Livecyle Signature service : Does anyone have any idea when this error shows up ?
PDFSignatureVerificationResult signInfo = signClient.verify(
inputPDF,
fieldName,
RevocationCheckStyle.NoCheck,
VerificationTime.CURRENT_TIME,
null,
null,
null,
null);
java.lang.ClassCastException: com.rsa.jsafe.provider.JSA_RSAPublicKey incompatible with com.rsa.jsafe.provider.JS_PublicKey
    at com.rsa.jsafe.provider.JS_Signature.engineInitVerify(Unknown Source)
    at java.security.Signature$SignatureImpl.engineInitVerify(Signature.java:510)
    at java.security.Signature.initVerify(Signature.java:182)
    at com.adobe.livecycle.signatures.pki.signature.CMSPKCS7Impl.verify(CMSPKCS7Impl.java:178)
    at com.adobe.livecycle.signatures.pki.signature.CMSPKCS7Impl.verify(CMSPKCS7Impl.java:424)
    at com.adobe.livecycle.signatures.pki.impl.PKIOperations.verifySignature(PKIOperations.java: 428)
    at com.adobe.idp.cryptoprovider.PKCS7Verifier.verify(PKCS7Verifier.java:109)
    at com.adobe.internal.pdftoolkit.services.digsig.digsigframework.impl.SignatureHandlerPKCS7. validate(SignatureHandlerPKCS7.java:241)
    at com.adobe.internal.pdftoolkit.services.digsig.Signature.validate(Signature.java:858)
    at com.adobe.livecycle.signatures.service.impl.VerifyImpl.verifyPDFSignature(VerifyImpl.java :781)
    at com.adobe.livecycle.signatures.service.impl.VerifyImpl.verifyField(VerifyImpl.java:388)
    at com.adobe.livecycle.signatures.service.impl.VerifyImpl.verify(VerifyImpl.java:229)
    at com.adobe.livecycle.signatures.service.impl.DocumentSecurityService.verify2(DocumentSecur ityService.java:870)
    at com.adobe.livecycle.signatures.service.impl.DocumentSecurityService.verify(DocumentSecuri tyService.java:725)
    at sun.reflect.GeneratedMethodAccessor729.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:37)
    at java.lang.reflect.Method.invoke(Method.java:600)
    at com.adobe.idp.dsc.component.impl.DefaultPOJOInvokerImpl.invoke(DefaultPOJOInvokerImpl.jav a:118)
    at com.adobe.idp.dsc.interceptor.impl.InvocationInterceptor.intercept(InvocationInterceptor. java:140)
    at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
    at com.adobe.idp.dsc.interceptor.impl.DocumentPassivationInterceptor.intercept(DocumentPassi vationInterceptor.java:53)
    at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
    at com.adobe.idp.dsc.transaction.interceptor.TransactionInterceptor$1.doInTransaction(Transa ctionInterceptor.java:74)
    at com.adobe.idp.dsc.transaction.impl.ejb.adapter.EjbTransactionBMTAdapterBean.doRequiresNew (EjbTransactionBMTAdapterBean.java:218)
    at com.adobe.idp.dsc.transaction.impl.ejb.adapter.EJSLocalStatelessEjbTransactionBMTAdapter_ 3af08fdf.doRequiresNew(Unknown Source)
    at com.adobe.idp.dsc.transaction.impl.ejb.EjbTransactionProvider.execute(EjbTransactionProvi der.java:133)
    at com.adobe.idp.dsc.transaction.interceptor.TransactionInterceptor.intercept(TransactionInt erceptor.java:72)
    at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
    at com.adobe.idp.dsc.interceptor.impl.InvocationStrategyInterceptor.intercept(InvocationStra tegyInterceptor.java:55)
    at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
    at com.adobe.idp.dsc.interceptor.impl.InvalidStateInterceptor.intercept(InvalidStateIntercep tor.java:37)
    at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
    at com.adobe.idp.dsc.interceptor.impl.AuthorizationInterceptor.intercept(AuthorizationInterc eptor.java:188)
    at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
    at com.adobe.idp.dsc.interceptor.impl.JMXInterceptor.intercept(JMXInterceptor.java:48)
    at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
    at com.adobe.idp.dsc.engine.impl.ServiceEngineImpl.invoke(ServiceEngineImpl.java:115)
    at com.adobe.idp.dsc.routing.Router.routeRequest(Router.java:129)
    at com.adobe.idp.dsc.provider.impl.base.AbstractMessageReceiver.invoke(AbstractMessageReceiv er.java:329)
    at com.adobe.idp.dsc.provider.impl.ejb.receiver.EjbReceiverBean.invoke(EjbReceiverBean.java: 158)
    at com.adobe.idp.dsc.provider.impl.ejb.receiver.EJSRemoteStatelessInvocation_b542628e.invoke (Unknown Source)
    at com.adobe.idp.dsc.provider.impl.ejb.receiver._EJSRemoteStatelessInvocation_b542628e_Tie.i nvoke(_EJSRemoteStatelessInvocation_b542628e_Tie.java:161)
    at com.adobe.idp.dsc.provider.impl.ejb.receiver._EJSRemoteStatelessInvocation_b542628e_Tie._ invoke(_EJSRemoteStatelessInvocation_b542628e_Tie.java:88)
    at com.ibm.CORBA.iiop.ServerDelegate.dispatchInvokeHandler(ServerDelegate.java:622)
    at com.ibm.CORBA.iiop.ServerDelegate.dispatch(ServerDelegate.java:475)
    at com.ibm.rmi.iiop.ORB.process(ORB.java:513)
    at com.ibm.CORBA.iiop.ORB.process(ORB.java:1574)
    at com.ibm.rmi.iiop.Connection.respondTo(Connection.java:2841)
    at com.ibm.rmi.iiop.Connection.doWork(Connection.java:2714)
    at com.ibm.rmi.iiop.WorkUnitImpl.doWork(WorkUnitImpl.java:63)
    at com.ibm.ejs.oa.pool.PooledThread.run(ThreadPool.java:118)
    at com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java:1550)

Are you using the Reference Implementation WAR files that ship with Flash Access 2.0, or have you customized the WARs? The ClassNotFoundException suggests the WAR is missing some of the required JAR files (specifically bcprov-jdk15-141.jar), so if you have created the WAR yourself, please make sure you have included all the required JAR files listed in the "Setting up the development environment" section of Protecting Content.

Verify signature on SAML assertion

I've already asked this question on StackOverflow (http://stackoverflow.com/questions/25394137/verify-signature-on-saml-assertion), but I'm hoping to get a better response here. I'm trying to validate some SAML that looks like this:
<samlp2:Response Destination="http://www.testhabaGoba.com" ID="ResponseId_934151edfe060ceec3067670c2f0f1ea" IssueInstant="2013-09-24T14:33:29.507Z" Version="2.0" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:samlp2="urn:oasis:names:tc:SAML:2.0:protocol">
<ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
</ds:Signature>
<saml2:Assertion ID="SamlAssertion-05fd8af7f2c9972e69cdbca612d3f3b8" IssueInstant="2013-09-24T14:33:29.496Z" Version="2.0" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">
<ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
</ds:Signature>
</saml2:Assertion>
</samlp2:Response>
The signature on the response always passes, but the signature on the assertion always fails. Even when I use a SAML that doesn't sign the response the assertion signature fails. Here's a condensed version of the code I'm using:
foreach (XmlElement node in xmlDoc.SelectNodes("//*[local-name()='Signature']"))
{// Verify this Signature block
SignedXml signedXml = new SignedXml(node.ParentNode as XmlElement);
signedXml.LoadXml(node);
KeyInfoX509Data x509Data = signedXml.Signature.KeyInfo.OfType<KeyInfoX509Data>().First();
// Verify certificate
X509Certificate2 cert = x509Data.Certificates[0] as X509Certificate2;
log.Info(string.Format("Cert s/n: {0}", cert.SerialNumber));
VerifyX509Chain(cert);// Custom method
// Check for approval
X509Store store = new X509Store(StoreName.TrustedPublisher, StoreLocation.LocalMachine);
store.Open(OpenFlags.ReadOnly);
X509Certificate2Collection collection = store.Certificates.Find(X509FindType.FindBySerialNumber, cert.SerialNumber, true);
Debug.Assert(collection.Count == 1);// Standing in for brevity
// Verify signature
signedXml.CheckSignature(cert, true);
Everything works except the CheckSignature method. It's the only thing that fails and it always fails the SAML assertion. What am I doing wrong?

Hello Matthew T. Ricks,
Personally after reading your post I don't think this issue is related to this forum "Discuss and ask questions about the C# programming language, IDE, libraries, samples, and tools."
The problem is due to SAML assertion fail and I read something like this
http://docs.oracle.com/cd/E21455_01/common/tutorials/authn_saml_xml_sig.html to konw what is SAML and how it works. I will recommend you consult SAML related forum to ask this question.
Regards,
Barry
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

SAMLUtils.checkSignatureValid: Couldn't verify signature.

Hi,
When i try to the SAML post. I receive the below error message.
</ds:Signature><samlp:Status><samlp:StatusCode Value="samlp:Success"/></samlp:Status><saml:Assertion xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion" AssertionID="_2a1708489b7c0a59481ab12aaf855362" IssueInstant="2012-03-27T18:21:36Z" Issuer="econnectng07.test.com:443" MajorVersion="1" MinorVersion="1"><saml:Conditions NotBefore="2012-03-27T18:21:36Z" NotOnOrAfter="2012-03-27T18:26:36Z"/><saml:AuthenticationStatement AuthenticationInstant="2012-03-27T18:21:02Z" AuthenticationMethod="urn:oasis:names:tc:SAML:1.0:am:HardwareToken"><saml:Subject><saml:NameIdentifier Format="urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName">uid=test,ou=People,ou=AMIND,dc=amat,dc=com </saml:NameIdentifier><saml:SubjectConfirmation><saml:ConfirmationMethod>urn:oasis:names:tc:SAML:1.0:cm:bearer</saml:ConfirmationMethod></saml:SubjectConfirmation></saml:Subject><saml:SubjectLocality IPAddress="10.208.155.122"/></saml:AuthenticationStatement></saml:Assertion></samlp:Response>
libSAML:03/27/2012 11:21:37:067 AM PDT: Thread[service-j2ee-103,5,main]
getWSSTTokenProfilePublicKey: entering
libSAML:03/27/2012 11:21:37:067 AM PDT: Thread[service-j2ee-103,5,main]
Could not find a KeyInfo, try to use certAlias
libSAML:03/27/2012 11:21:37:068 AM PDT: Thread[service-j2ee-103,5,main]
SAMLUtils.checkSignatureValid: Couldn't verify signature.
libSAML:03/27/2012 11:21:37:068 AM PDT: Thread[service-j2ee-103,5,main]
verifyResponse: Response's signature is invalid.
libSAML:03/27/2012 11:21:37:069 AM PDT: Thread[service-j2ee-103,5,main]
SAMLUtils.sendError: error page/saml2/jsp/saml2error.jsp
libSAML2:03/27/2012 11:21:41:021 AM PDT: Thread[SystemTimerPool,5,main]
CacheCleanUpRunnable.run:
This is SAML 1 post and i have the client certificate imported in my saml keystore also. Appreciate your help.
libSAML:03/27/2012 11:22:34:002 AM PDT: Thread[SystemTimerPool,5,main]
Clean up runnable wakes up..
libSAML:03/27/2012 11:22:34:002 AM PDT: Thread[SystemTimerPool,5,main]
AssertionManager::CleanUpThread::number of assertions in IdEntryMap:0
[root@dca-ldap-stg1 debug]# pwd

You've cut-off the digital signature from the SAML response in your posting, and haven't provided any information about the digital certificate in your keystore. How can one respond to your problem?
Is the client certificate in your keystore responsible for signing the SAML assertion? If not, do you have the SAML service's digital certificate accessible to your verifier program in your keystore? If not, you need to import the signer's digital certificate into your keystore, verify that it is there, and then run your program again.
Arshad Noor
StrongAuth, Inc.

"Error 0x800b010a: Failed to verify signature of payload: jre" under Eclipse IDE

Hello,
This error is occurring on a system that kept is off the internet (for security reasons):
Failed authenticode verification of payload: C:\ProgramData\Package Cache\.unverified\jre
... Error 0x800b010a: Failed to verify signature of payload: jre
It is related to certificates. I found a KB that addresses the error when the IDE is VS2013 or VS2012:
https://support.microsoft.com/en-us/kb/2746268?wa=wsignin1.0
But the IDE in use in my case is Eclipse. Does the KB apply?

Hi Rich,
the WSUS forum probably isn't the best place for this, you may have better luck in one of the Eclipse forums.
However I have had to follow the steps
in this to get around similar errors when deploying software in disconnected errors, where root cert updates hadn't been deployed before, so the above may indeed help
If you find the answer of assistance please "Vote as Helpful"and/or "Mark as Answer" where applicable. This helps others to find solutions for there issues, and recognises contributions made to the community :)

Verifying Signature PDFs when opening is very slow

When opening a PDF it takes a really long time. At the bottom of the screen it shows "verifying signatures". How can speed up this process without unchecking "verify signatures when the document is opened"? As a test I unchecked this box and the PDF opened almost instantly which leads to be beleive this "verification" is causing the slowness. Also tested the file on a network drive and local desktop and both takes a really long time to open. I also imported some of the signature certificates into the "trusted certificates" but that did not fix the issue. Thanks.

What version of Acrobat are you using? Are the signtures use self-signed certificates or something else?I know signature verification performance has been addressed in various updates. You might also want to post this in the Acrobat Security forum: http://forums.adobe.com/community/acrobat/security_%26_digital_signatures?view=discussions

Cannot verify signature block SecurityException during version update

Hi all,
I have my application installed on few systems using webstart. All the jars(including third party are signed by my certificate).
After that, during an update, I signed all the jars using a new certificate.
I have placed new jars in the cache server(Tomcat 5.0) and started it.
Now I made necessary version changes in the JNLP file(while the server is running).
When I started application on client machines, it tried to bring get the jars of updated version.
During that process, following exception is shown while downloading a thirdparty jar:
java.lang.SecurityException: cannot verify signature block file META-INF/ABC
     at sun.security.util.SignatureFileVerifier.processImpl(Unknown Source)
     at sun.security.util.SignatureFileVerifier.process(Unknown Source)
     at java.util.jar.JarVerifier.processEntry(Unknown Source)
     at java.util.jar.JarVerifier.update(Unknown Source)
     at java.util.jar.JarFile.initializeVerifier(Unknown Source)
     at java.util.jar.JarFile.getInputStream(Unknown Source)
     at com.sun.javaws.security.SigningInfo.checkSigning(Unknown Source)
     at com.sun.javaws.cache.DownloadProtocol$RetrieveAction.actionDownload(Unknown Source)
     at com.sun.javaws.cache.DownloadProtocol.doDownload(Unknown Source)
     at com.sun.javaws.cache.DownloadProtocol.getResource(Unknown Source)
     at com.sun.javaws.LaunchDownload.downloadJarFiles(Unknown Source)
     at com.sun.javaws.LaunchDownload.downloadEagerorAll(Unknown Source)
     at com.sun.javaws.Launcher.downloadResources(Unknown Source)
     at com.sun.javaws.Launcher.handleApplicationDesc(Unknown Source)
     at com.sun.javaws.Launcher.handleLaunchFile(Unknown Source)
     at com.sun.javaws.Launcher.run(Unknown Source)
     at java.lang.Thread.run(Unknown Source)
JNLPException[category: Download Error : Exception: java.lang.SecurityException: cannot verify signature block file META-INF/ABC : LaunchDesc: null ]
     at com.sun.javaws.security.SigningInfo.checkSigning(Unknown Source)
     at com.sun.javaws.cache.DownloadProtocol$RetrieveAction.actionDownload(Unknown Source)
     at com.sun.javaws.cache.DownloadProtocol.doDownload(Unknown Source)
     at com.sun.javaws.cache.DownloadProtocol.getResource(Unknown Source)
     at com.sun.javaws.LaunchDownload.downloadJarFiles(Unknown Source)
     at com.sun.javaws.LaunchDownload.downloadEagerorAll(Unknown Source)
     at com.sun.javaws.Launcher.downloadResources(Unknown Source)
     at com.sun.javaws.Launcher.handleApplicationDesc(Unknown Source)
     at com.sun.javaws.Launcher.handleLaunchFile(Unknown Source)
     at com.sun.javaws.Launcher.run(Unknown Source)
     at java.lang.Thread.run(Unknown Source)I restarted the cache server (Tomcat).
Now the download went fine. Otherthan restarting the server, no other changes were made.
What could be the possible reason? Updating the JNLP file while server is running is a problem?
I tried this to recreate this scenario several times.
On certain occasions, I came across above exception along with another exception:
com.sun.deploy.net.JARSigningException: Could not verify signing in resource: (http://abc.xyz.com:5967/XXX/JARS/ThirdPartyJars/abc.jar, 8.0)
at com.sun.deploy.cache.CacheEntry.writeManifest(Unknown Source)
at com.sun.deploy.cache.CacheEntry.access$1800(Unknown Source)
at com.sun.deploy.cache.CacheEntry$9.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at com.sun.deploy.cache.CacheEntry.writeFileToDisk(Unknown Source)
at com.sun.deploy.cache.Cache.downloadResourceToTempFile(Unknown Source)
at com.sun.deploy.cache.Cache.downloadResourceToCache(Unknown Source)
at com.sun.deploy.net.DownloadEngine.actionDownload(Unknown Source)
at com.sun.deploy.net.DownloadEngine.getCacheEntry(Unknown Source)
at com.sun.deploy.net.DownloadEngine.getCacheEntry(Unknown Source)
at com.sun.deploy.net.DownloadEngine.getResourceCacheEntry(Unknown Source)
at com.sun.deploy.net.DownloadEngine.getResourceCacheEntry(Unknown Source)
at com.sun.deploy.net.DownloadEngine.getResource(Unknown Source)
at com.sun.javaws.LaunchDownload.downloadJarFiles(Unknown Source)
at com.sun.javaws.LaunchDownload.downloadEagerorAll(Unknown Source)
at com.sun.javaws.Launcher.downloadResources(Unknown Source)
at com.sun.javaws.Launcher.prepareLaunchFile(Unknown Source)
at com.sun.javaws.Launcher.prepareToLaunch(Unknown Source)
at com.sun.javaws.Launcher.prepareToLaunch(Unknown Source)
at com.sun.javaws.Launcher.launch(Unknown Source)
at com.sun.javaws.Main.launchApp(Unknown Source)
at com.sun.javaws.Main.continueInSecureThread(Unknown Source)
at com.sun.javaws.Main$1.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)Everytime, after restarting the cache server, update download went fine.
Does anyone come across such thing?
Please Help me out.
Thanks in Advance..

I have JRE 1.5.0_14 in the client machine.
Once this exception comes, no matter how many times I tried to relaunch the application same exception (cannot verify signature block is shown. Once i restart the server, its working fine.
Regarding jardiff, Yes. we use it.
Also, this exception is not shown on every machine which are trying to download same update. Only on few..
Any idea regarding this, please share it.
Chakri
Edited by: chakriv on Mar 22, 2010 9:02 PM

Java.io.IOException: cannot verify signature block file META-INF/MYKEY

Hello,
i have a serios problem in my company.
I developed javaws aplication running since years and now we have starting problems with actual java, it brings security warnings. This warning says this application will be blocked in further releases.
The app is signed with an old java 6 jarsigner. If I sign the jar files of the app with java 7 u45 or u40, I receive the following exception by webstart :
java.io.IOException: cannot verify signature block file META-INF/MYKEY
    at com.sun.deploy.cache.CacheEntry$10.run(Unknown Source)
    at java.security.AccessController.doPrivileged(Native Method)
    at com.sun.deploy.cache.CacheEntry.writeFileToDisk(Unknown Source)
    at com.sun.deploy.cache.CacheEntry.writeFileToDisk(Unknown Source)
    at com.sun.deploy.cache.Cache.downloadResourceToTempFile(Unknown Source)
    at com.sun.deploy.cache.Cache.downloadResourceToCache(Unknown Source)
    at com.sun.deploy.net.DownloadEngine.actionDownload(Unknown Source)
    at com.sun.deploy.net.DownloadEngine.downloadResource(Unknown Source)
    at com.sun.deploy.cache.ResourceProviderImpl.getResource(Unknown Source)
    at com.sun.deploy.cache.ResourceProviderImpl.getResource(Unknown Source)
    at com.sun.javaws.LaunchDownload$DownloadTask.call(Unknown Source)
    at java.util.concurrent.FutureTask.run(Unknown Source)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
    at java.lang.Thread.run(Unknown Source)
do somebody have an idea what I could try to do to solve this problem?
I create the keystore on the follwoing way: C:\Programme\Java\jdk1.7.0_45\bin>keytool -genkey -keyalg RSA -alias MYKEY -keystore fspKeys -storepass xxxxxxxx

I have JRE 1.5.0_14 in the client machine.
Once this exception comes, no matter how many times I tried to relaunch the application same exception (cannot verify signature block is shown. Once i restart the server, its working fine.
Regarding jardiff, Yes. we use it.
Also, this exception is not shown on every machine which are trying to download same update. Only on few..
Any idea regarding this, please share it.
Chakri
Edited by: chakriv on Mar 22, 2010 9:02 PM

Adding another document to a Verified signature document

I have a document that has a verified signature on it and I need to add it to another document, but when I do it doesn't maintain the signature. How do I merge these two documents into one?

I have a document that has a verified signature on it and I need to add it to another document, but when I do it doesn't maintain the signature. How do I merge these two documents into one?

Can't download itue=nes new computer keeps saying verifying signature

I have a new computer now the first thing i wanted to do was get itunes! 5 attempts windows kept blocking it because it can not verify the signature, so i went to the disscusions page and did the following turned off all my security tried again nothin! Followed certain links for the downloads..same reply! Even disabled my activex etc that windows says to do in their help pages still the same reply! Then i saved instead of run but still ''can not verify signature'' why can't i download something as simple as itunes ive never had a problem on my old computer. Is it becasue of vista?

ok i can past the verifyng signature by going into tools then internet options,
then advanced tab scroll down to security and i unchecked all the box's apply this and you'll be able to download it. But it keeps saying now my system is not modified and stops installing!

Cannot verify signature block file using BC

I get the below exception when verifying a signed jar.The public key is from the certificate created from the Bouncy Castle's Provider
java.lang.SecurityException: cannot verify signature block file META-INF/LVL1
     at sun.security.util.SignatureFileVerifier.processImpl(SignatureFileVerifier.java:202)
     at sun.security.util.SignatureFileVerifier.process(SignatureFileVerifier.java:176)
     at java.util.jar.JarVerifier.processEntry(JarVerifier.java:276)
Signature algorithm used is : "SHA1WithRSAEncryption"
LVL1.SF and LVL1.RSA are in place inside the jar.No issues in creating the certificate and signing the jar as well.
The provider is added to the Security thro security.addprovider() dynamically.
Any pointers to resolve this issue ?

I have JRE 1.5.0_14 in the client machine.
Once this exception comes, no matter how many times I tried to relaunch the application same exception (cannot verify signature block is shown. Once i restart the server, its working fine.
Regarding jardiff, Yes. we use it.
Also, this exception is not shown on every machine which are trying to download same update. Only on few..
Any idea regarding this, please share it.
Chakri
Edited by: chakriv on Mar 22, 2010 9:02 PM

Creating and verifying signature and certification

Hi experts,
we are developing a PDF based supply chain process to collect some chemical data. Process description:
- Company creates an interactive form
- Company sends the form to the business partner
- Business partner fills out the form
- Business partner sends the form back
We create the PDF and process the received PDF in ABAP.
Now we have the following questions / problems:
- How to certify the PDF that will be sent out (without user interaction)
- How to sign the PDF based on the logged on user before send out (without user interaction)
- How to verify the signature of the business partner (if it is valid and it belongs to the business partner)
Could you please help us?
Thanks and have a great day.
Thomas

Hi Thomas & Experts,
I am also facing similar problem and while doing validation of the signature, the Reader prompts "IdentityUnverifiable" and the certificate is invalid. Any one kindly knows how to solve this problem ? The ADS has been configured with SSL connection on the server and the same certificate has been installed.
Appreciate them greatly.
Thanks~!
Regards,
Adrian

Owsm: Verify signature step & certificate references

Hi,
According to the WS-Security 1.0 specification there are 3 ways to reference the certificate:
1. Reference to a Subject Key Identifier
2. Reference to a Binary Security Token
3. Reference to an Issuer and Serial Number
Unless I'm doing something wrong it seems that only the second method is supported. I get NPE and invalid signature errors for other methods. Can anyone confirm if the owsm only supports the second method?
I also don't understand why the "Signer's public-key alias" property is necessary. Since the signature contains a certificate reference the owsm could find the certificate in the keystore except if the certificate is embedded in the security header in which case it already has all necessary information. Any ideas?
TIA,
Svetozar

i do use the soa suite and jdeveloper 10.1.3.3 i have created a webservice which i have deployed to the soa application server. using this webservice works using http and https
when i use owsm to add this webservice as a service this also works. using http and https
when i add the request policystep verify certificate i get the following error
Failed to initialize pipeline 'Request' in policy 'repeater(0.1)

BouncyCastle+Verify Signature

Similar Messages

Maybe you are looking for