Cannot verify signature block SecurityException during version update

Hi all,
I have my application installed on few systems using webstart. All the jars(including third party are signed by my certificate).
After that, during an update, I signed all the jars using a new certificate.
I have placed new jars in the cache server(Tomcat 5.0) and started it.
Now I made necessary version changes in the JNLP file(while the server is running).
When I started application on client machines, it tried to bring get the jars of updated version.
During that process, following exception is shown while downloading a thirdparty jar:
java.lang.SecurityException: cannot verify signature block file META-INF/ABC
     at sun.security.util.SignatureFileVerifier.processImpl(Unknown Source)
     at sun.security.util.SignatureFileVerifier.process(Unknown Source)
     at java.util.jar.JarVerifier.processEntry(Unknown Source)
     at java.util.jar.JarVerifier.update(Unknown Source)
     at java.util.jar.JarFile.initializeVerifier(Unknown Source)
     at java.util.jar.JarFile.getInputStream(Unknown Source)
     at com.sun.javaws.security.SigningInfo.checkSigning(Unknown Source)
     at com.sun.javaws.cache.DownloadProtocol$RetrieveAction.actionDownload(Unknown Source)
     at com.sun.javaws.cache.DownloadProtocol.doDownload(Unknown Source)
     at com.sun.javaws.cache.DownloadProtocol.getResource(Unknown Source)
     at com.sun.javaws.LaunchDownload.downloadJarFiles(Unknown Source)
     at com.sun.javaws.LaunchDownload.downloadEagerorAll(Unknown Source)
     at com.sun.javaws.Launcher.downloadResources(Unknown Source)
     at com.sun.javaws.Launcher.handleApplicationDesc(Unknown Source)
     at com.sun.javaws.Launcher.handleLaunchFile(Unknown Source)
     at com.sun.javaws.Launcher.run(Unknown Source)
     at java.lang.Thread.run(Unknown Source)
JNLPException[category: Download Error : Exception: java.lang.SecurityException: cannot verify signature block file META-INF/ABC : LaunchDesc: null ]
     at com.sun.javaws.security.SigningInfo.checkSigning(Unknown Source)
     at com.sun.javaws.cache.DownloadProtocol$RetrieveAction.actionDownload(Unknown Source)
     at com.sun.javaws.cache.DownloadProtocol.doDownload(Unknown Source)
     at com.sun.javaws.cache.DownloadProtocol.getResource(Unknown Source)
     at com.sun.javaws.LaunchDownload.downloadJarFiles(Unknown Source)
     at com.sun.javaws.LaunchDownload.downloadEagerorAll(Unknown Source)
     at com.sun.javaws.Launcher.downloadResources(Unknown Source)
     at com.sun.javaws.Launcher.handleApplicationDesc(Unknown Source)
     at com.sun.javaws.Launcher.handleLaunchFile(Unknown Source)
     at com.sun.javaws.Launcher.run(Unknown Source)
     at java.lang.Thread.run(Unknown Source)I restarted the cache server (Tomcat).
Now the download went fine. Otherthan restarting the server, no other changes were made.
What could be the possible reason? Updating the JNLP file while server is running is a problem?
I tried this to recreate this scenario several times.
On certain occasions, I came across above exception along with another exception:
com.sun.deploy.net.JARSigningException: Could not verify signing in resource: (http://abc.xyz.com:5967/XXX/JARS/ThirdPartyJars/abc.jar, 8.0)
at com.sun.deploy.cache.CacheEntry.writeManifest(Unknown Source)
at com.sun.deploy.cache.CacheEntry.access$1800(Unknown Source)
at com.sun.deploy.cache.CacheEntry$9.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at com.sun.deploy.cache.CacheEntry.writeFileToDisk(Unknown Source)
at com.sun.deploy.cache.Cache.downloadResourceToTempFile(Unknown Source)
at com.sun.deploy.cache.Cache.downloadResourceToCache(Unknown Source)
at com.sun.deploy.net.DownloadEngine.actionDownload(Unknown Source)
at com.sun.deploy.net.DownloadEngine.getCacheEntry(Unknown Source)
at com.sun.deploy.net.DownloadEngine.getCacheEntry(Unknown Source)
at com.sun.deploy.net.DownloadEngine.getResourceCacheEntry(Unknown Source)
at com.sun.deploy.net.DownloadEngine.getResourceCacheEntry(Unknown Source)
at com.sun.deploy.net.DownloadEngine.getResource(Unknown Source)
at com.sun.javaws.LaunchDownload.downloadJarFiles(Unknown Source)
at com.sun.javaws.LaunchDownload.downloadEagerorAll(Unknown Source)
at com.sun.javaws.Launcher.downloadResources(Unknown Source)
at com.sun.javaws.Launcher.prepareLaunchFile(Unknown Source)
at com.sun.javaws.Launcher.prepareToLaunch(Unknown Source)
at com.sun.javaws.Launcher.prepareToLaunch(Unknown Source)
at com.sun.javaws.Launcher.launch(Unknown Source)
at com.sun.javaws.Main.launchApp(Unknown Source)
at com.sun.javaws.Main.continueInSecureThread(Unknown Source)
at com.sun.javaws.Main$1.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)Everytime, after restarting the cache server, update download went fine.
Does anyone come across such thing?
Please Help me out.
Thanks in Advance..

I have JRE 1.5.0_14 in the client machine.
Once this exception comes, no matter how many times I tried to relaunch the application same exception (cannot verify signature block is shown. Once i restart the server, its working fine.
Regarding jardiff, Yes. we use it.
Also, this exception is not shown on every machine which are trying to download same update. Only on few..
Any idea regarding this, please share it.
Chakri
Edited by: chakriv on Mar 22, 2010 9:02 PM

Similar Messages

  • Cannot verify signature block file using BC

    I get the below exception when verifying a signed jar.The public key is from the certificate created from the Bouncy Castle's Provider
    java.lang.SecurityException: cannot verify signature block file META-INF/LVL1
         at sun.security.util.SignatureFileVerifier.processImpl(SignatureFileVerifier.java:202)
         at sun.security.util.SignatureFileVerifier.process(SignatureFileVerifier.java:176)
         at java.util.jar.JarVerifier.processEntry(JarVerifier.java:276)
    Signature algorithm used is : "SHA1WithRSAEncryption"
    LVL1.SF and LVL1.RSA are in place inside the jar.No issues in creating the certificate and signing the jar as well.
    The provider is added to the Security thro security.addprovider() dynamically.
    Any pointers to resolve this issue ?

    I have JRE 1.5.0_14 in the client machine.
    Once this exception comes, no matter how many times I tried to relaunch the application same exception (cannot verify signature block is shown. Once i restart the server, its working fine.
    Regarding jardiff, Yes. we use it.
    Also, this exception is not shown on every machine which are trying to download same update. Only on few..
    Any idea regarding this, please share it.
    Chakri
    Edited by: chakriv on Mar 22, 2010 9:02 PM

  • Java.io.IOException: cannot verify signature block file META-INF/MYKEY

    Hello,
    i have a serios problem in my company.
    I developed javaws aplication running since years and now we have starting problems with actual java, it brings security warnings. This warning says this application will be blocked in further releases.
    The app is signed with an old java 6 jarsigner.  If I sign the jar files of the app with java 7 u45 or u40, I receive the following exception by webstart :
    java.io.IOException: cannot verify signature block file META-INF/MYKEY
        at com.sun.deploy.cache.CacheEntry$10.run(Unknown Source)
        at java.security.AccessController.doPrivileged(Native Method)
        at com.sun.deploy.cache.CacheEntry.writeFileToDisk(Unknown Source)
        at com.sun.deploy.cache.CacheEntry.writeFileToDisk(Unknown Source)
        at com.sun.deploy.cache.Cache.downloadResourceToTempFile(Unknown Source)
        at com.sun.deploy.cache.Cache.downloadResourceToCache(Unknown Source)
        at com.sun.deploy.net.DownloadEngine.actionDownload(Unknown Source)
        at com.sun.deploy.net.DownloadEngine.downloadResource(Unknown Source)
        at com.sun.deploy.cache.ResourceProviderImpl.getResource(Unknown Source)
        at com.sun.deploy.cache.ResourceProviderImpl.getResource(Unknown Source)
        at com.sun.javaws.LaunchDownload$DownloadTask.call(Unknown Source)
        at java.util.concurrent.FutureTask.run(Unknown Source)
        at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
        at java.lang.Thread.run(Unknown Source)
    do somebody have an idea what I could try to do to solve this problem?
    I create the keystore  on the follwoing way: C:\Programme\Java\jdk1.7.0_45\bin>keytool -genkey -keyalg RSA -alias MYKEY -keystore fspKeys -storepass xxxxxxxx

    I have JRE 1.5.0_14 in the client machine.
    Once this exception comes, no matter how many times I tried to relaunch the application same exception (cannot verify signature block is shown. Once i restart the server, its working fine.
    Regarding jardiff, Yes. we use it.
    Also, this exception is not shown on every machine which are trying to download same update. Only on few..
    Any idea regarding this, please share it.
    Chakri
    Edited by: chakriv on Mar 22, 2010 9:02 PM

  • Itunes will not update.  I get an message saying that it cannot verify signature and it will not install, itunes will not update.  I get an message saying that it cannot verify signature and it will not install

    iTunes will not update.  I get an error message saying that it cannot verify signature and it will be unable to install.

    Yeah me too try going through the apple website in (firefox) and download iTunes there. Currently that's what I'm doing.

  • Event 7000 and 7001 in event log; cannot verify signature

    On the user's system, the Workstation service will not start, preventing access to network drives through UNC paths.
    The dependencies for the Workstation service (Browser Support service, SMB 1 redirect, SMB 2 redirect) are not starting because the system detects a problem with the digital signature for a file. For example:
    The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error:
    Windows cannot verify the digital signature for this file. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
    I've run sfc /scannow a number of times, but that does not resolve the issue.
    Suggestions, please!

    I tried updating bowser.sys at an elevated command prompt using the following commands:
    takeown /f  C:\windows\system32\drivers\bowser.sys
    icacls C:\windows\system32\drivers\bowser.sys  /grant administrators:F
    copy file-from-working-system C:\windows\system32\drivers\bowser.sys
    The CBS.log from sfc doesn't indicate the directory in C:\Windows\winsxs to copy the file. There are multiple directories for the file, each tagged with multiple IDs. I used the same commands on the latest directory in \Winsxs, copied bowser.sys there, but
    sigcheck shows that the file is still not signed.
    Sigcheck v2.1 - File version and signature viewer
    Copyright (C) 2004-2014 Mark Russinovich
    Sysinternals - www.sysinternals.com
    c:\windows\system32\drivers\bowser.sys:
            Verified:       Unsigned
            Link date:      11:55 PM 2/22/2011
            Publisher:      Microsoft Corporation
            Description:    NT Lan Manager Datagram Receiver Driver
            Product:        Microsoft« Windows« Operating System
            Prod version:   6.1.7601.17565
            File version:   6.1.7601.17565 (win7sp1_gdr.110222-1630)
            MachineType:    64-bit
            Binary Version: 6.1.7601.17565
            Original Name:  browser.sys
            Internal Name:  browser.sys
            Copyright:      ⌐ Microsoft Corporation. All rights reserved.
            Comments:       n/a
            Entropy:        6.178

  • Logical (feeder) system cannot be determined -  GTS error during BP Update

    Hi All,
    While updating a BP in CRM system, I am getting the following error in application log SLG1 as "Logical (feeder) system cannot be determined". This occurs when we change or create a BP and call the function module " BAPI_TRANSACTION_COMMIT". The issue occurs from the function module "/SAPSLL/BP_XI_GET_LOGSYS" that does not provide any logical system. I feel this is due to any changes in GTS configuration as we did not find this issue earlier. Can anyone please provide me some directions in rectifying this issue.

    Hi,
    I just checked for the customer in GTS, but it is not shown there. I have following observations:
    1. If i try to transfer Vendor from ECC to GTS, it is happening successfully. I could see that vendor in GTS.
    2. Seems like Partner Number is allocated to Customer in GTS. I transferred Customer after successfully transferring vendor, Customer transferred failed!. So I again transferred Vendor from ECC to GTS, this happened successfully.
    Observation:
    First successfull vendor transfer: Partner Number in GTS: 134
    Unsuccessfull transfer of Customer: Not visible in GTS
    Second successfull vendor transfer: Partner Number in GTS: 136
    Please see the above observation and let me if anything can be dudcted from this.
    Also checked table BUT100 in GTS for Business Partners. Customer not visible here too.
    Please Help!
    Regards,
    Madhav

  • Windows cannot verify the digital signature for the drivers required for this device. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. (Code

    I get this message when I check the Device manager for my Ipod
    Windows cannot verify the digital signature for the drivers required for this device. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. (Code 52)
    How do I resolve this I have reinstalled iTunes but it still doesn't recognise my ipod

    I reinstalled Itunes a couple of times.  I unistalled all programs that I never use, I updated all of my drivers, Windows swept my computer and found no problems.  I have a yellow causion lite when I look at the USB-port with the phone connected.  All other devices work without a problem.

  • I can't upgrade from IOS 6.0.1 to IOS 7.1.1. iPad says it has downloaded IOS 7.0.3 but cannot verify the installation. Cannot restore or update in iTunes either. Help please?

    I can't upgrade from IOS 6.0.1 to IOS 7.1.1 on my iPad 2. iPad says it has downloaded IOS 7.0.3 but cannot verify the installation if I try and install it. It claims that I have lost internet connection, which I have not. I cannot restore or update the iPad in iTunes either, if I try to, I get an error message which says that I 'do not have permission to access the requested resource'. I am using the latest version of iTunes on Windows 8. I have tried putting the iPad in recovery mode and restoring it with iTunes, the result is the same.
    Any help would be much appreciated.
    Thanks!

    @Rudegar
    Thanks for the reply, but I've been having this problem for well over a week. If it is a corrupt download, is there some way of deleting it from the iPad and getting a new one?
    Thanks

  • I cannot import any video into my  Lightroom 5.4 (last version updated) for MAC

    I cannot import any video into my  Lightroom 5.4
    (last version updated) for MAC
    in the beginnig it was  working, just after installation and update... now nomore...
    I use .mp4 files
    Already tried to use a new catalog, clean caches, and reinstalling
    the error says "was not able to import video files"
    thanks

    Arghhh! A big thank-you to hhps-photo, you just solved the myth bothering me for the last 2 months!
    I recently upgraded to Lightroom 5 from 4 and could not import any video. But when I downgrade to LR4 it worked again. I've tried so many other solutions suggested in the forum but none worked including cleaning cache, install divix plugin, install 32 bit version etc. Finally - it's because I blocked LR5 connecitons in my firewall !!!
    So simply allowed LR5 internet connection in my firewall settings and LR5 worked like a charm!
    Kevin

  • Win 7 PC freeze and block network access for other PC on same switch during windows update from WSUS

    Hello,
    It's been a problem for me for a long time now, but the last time (today) I found 3 PC on 2 different switches that block all the network on this 2 switches during the update. 
    I have a Domain with 80 PC with Win 7 (32&64bit) that takes the updates from the WSUS server that is configured on a Win2k8 r2. The system works well from 2 years from now but sometimes cause this errors that make me look like a dummy in front of angry
    employees. If one of the PC get freeze , it will cause lost of connection on all the PC on same switch, and i have to find the blocked PC, remove from network, restart switch and hope that they will came back on.
    Does anyone experienced this problem? Any help will be appreciated 
    Thank you!
    List of updates for today below

    Hi
    Thanks for your response, yes I understand that the result is a Broadcast Storm and yes I have the cheapest switch on market :/.
    The interest fact is that on one PC, I changed everything and keep only the old HDD and on last updates yesterday it was one of the blocked one too. So this make
    me doubt that is something wrong in software on that PC. I don't have any third-part programs except browsers and all have Genuine Win7 
    The only investigation remained is what happens during the update process? 
    Is WSUS involved in something?
    And another thing is the fact that some of the PC are cloned, but I have carefully changed the SID
    Thank you for your support

  • I have Microsoft Word for Mac 2011, version 14.3.1.  When I try to open a document, an error occurs, says file type is "blocked from opening in this version."  This was NOT immediately after a version update.  Any ideas?  Thank you.

    I have Microsoft Word for Mac 2011, version 14.3.1.  When I try to open a document, an error occurs, says file type is "blocked from opening in this version."  This was NOT immediately after a version update.  Any ideas?  Thank you.

    Take a look here:
    http://support.microsoft.com/kb/953266
    If that doesn't help, I'd suggest you take up the question in Microsoft's own forums or with Microsoft support.
    Regards.

  • Ok guys i need help my ipod touch froze during an update now i put it inot the recovery mode or dfu and it will not reset itself at all it comes up with an error code and says this ipod cannot reset now does anyone have any ideas of what to do with it

    ok guys i need help anyone with my ipod it froze during an update now it will not work at all i ahve put it into the recovery mode or dfu and  it will not reset it self it comes up with an error message 1603 the number is and says the ipod cannot be reset anyone please help me i have tryed everything googled you tubed everything

    Error 1604
    This error is often related to USB timing. Try changing USB ports, using a different dock connector to USB cable, and other available USB troubleshooting steps (troubleshooting USB connections. If you are using a dock, bypass it and connect directly to the white Apple USB dock connector cable. If the issue persists on a known-good computer, the device may need service.
    If the issue is not resolved by USB isolation troubleshooting, and another computer is not available, try these steps to resolve the issue:
    Connect the device to iTunes, confirm that the device is in Recovery Mode. If it's not in Recovery Mode,put it into Recovery Mode.
    Restore and wait for the error.
    When prompted, click OK.
    Close and reopen iTunes while the device remains connected.
    The device should now be recognized in Recovery Mode again.
    Try to restore again.
    If the steps above do not resolve the issue, try restoring using a known-good USB cable, computer, and network connection.
    Error 1600, 1601, 1602
    Error 1603
    Follow the steps listed above for Error 1604. Also, discard the .ipsw file, open iTunes and attempt to download the update again. See the steps under Advanced Steps > Rename, move, or delete the iOS software file (.ipsw) below for file locations.If you do not want to remove the IPSW in the original user, try restoring in a new administrator user. If the issue remains, Eliminate third-party security software conflicts.

  • HT202157 My Apple TV blocked during software update. What should I do?

    My Apple TV blocked during software update. What should I do?

    You can't do much else besides pull the plug. If it causes further problems you should be able to restore as below:
    Get yourself a micro USB cable (sold separately), you can restore your Apple TV from iTunes:
    Remove ALL cables from Apple TV. (if you don't you will not see Apple TV in the iTunes Source list)
    Connect the micro USB cable to the Apple TV and to your computer.
    Reconnect the power cable (only for Apple TV 3)
    Open iTunes.
    Select your Apple TV in the Devices list, and then click Restore.
    On the other hand you may be able to simply start the update again. If however the update continues to fail, you should try the restore routine above.

  • HT1369 During the updation of 10.7 version of Itunes on my iphone 4s, my phone has gone into recovery mode & is not showing up in i Tunes nor in my computer  (windows xp). What shall i do so that my phone gets connected & running??

    During the updation of 10.7 version of Itunes on my iphone 4s, my phone has gone into recovery mode & is not showing up in i Tunes nor in my computer  (windows xp). What shall i do so that my phone gets connected & running??

    Your iPhone is in recoverty mode at the moment so to possibly get it back up and running you would need to do a restore as you have been trying. Follow the steps in the article below for the specific error messages you have been receiving. If after following all steps the issue remains book an appointment at a local Apple Retail Store to have the iPhone evaluated.
    Resolve specific iTunes update and restore errors

  • IE 11 is not blocked during Automatic Update step.

    Greetings.
    I am experiencing something very strange with our Windows Deployment Servers.
    I have WDS 2013 with AIK-8.1 combination server to do our machine deployment. Some of our machines need to have IE11 blocked from installation (for compatability issue). As in case with IE10 before we installed blocker from microsoft and then captured image.
    Before capturing it it was tested by runnign auto update and ie 11 is not being installed.
    Problem is during deployment during automatic update step (post application) the system picks up and installs ie11.
    If I remove it by hand after installation is over and run windows update - it's not installed. If I disable auto-update step in installation - and run them by hand after - it's not installed.
    Does anyone else experienced this scenario when blocker doesn't seem to have effect?

    Hi,
    According to FAQ here:
    Internet Explorer 11 Blocker Toolkit: Frequently Asked Questions
    http://technet.microsoft.com/en-us/ie/dn449234.aspx
    What registry key is being used to disable delivery of Internet Explorer 10?
    HKLM\SOFTWARE\Microsoft\Internet Explorer\Setup\10.0
    When the installation is over and about to updating, cancel the update and check the registry key.
    A value of 1 turns off the automatic delivery
    of Internet Explorer 11 using Automatic Updates and turns off the Express install option.
    Not providing a registry key, or using a value of anything other than 1,
    lets the user install Internet Explorer 11 through Automatic Updates or a manual update.

Maybe you are looking for

  • HT1420 How to remove credit card for iTunes

    Yes I have been trying to remove my credit card.  I put 50 iTunes.  But will not quit going to prepaid credit.  No funds. 

  • Error While Attempting to Uninstall Exchange 2013 Mailbox Servers

    Hi everyone, We recently migrated all of our users from Site A to Site B. Now, I'm trying to remove the Exchange mailbox servers that were in Site A, since we're going to be decommissioning the site. All of these mailbox servers have been removed fro

  • New search result in new tab

    I had firefox set that each time I clicked on a web site listed in a Google search result, it would open in a new tab. Now for some reason it does not work and I can't find the setting.

  • Issues with MacBook Pro

    Hi, I have a problem with my MacBook Pro (early 2010). I tried restarting the system to install an OSX update (I was prompted to), but on the restart it froze on the grayish/white screen with the apple icon and spinning gears. So far I've been able t

  • Help- Elements 9 "Does not show Advanced dialog" for downloading

    Hi, I'm fairly new to elements and have gone through my "Dummies Book" and yesterday received my Elements 9 book by Scott Kelby and Matt Kloskowski.  My problem is when I'm attempting to download 5 new pictures from a card that still has 700 on it -