ClaimableManager - signer information problem

Question

Hi,
I am using Jboss 5.1 and ATG 10.1.1. While starting the server with just DCS module, I am getting the error:
20:26:01,047 ERROR [nucleusNamespace.] Unable to set configured property "/atg/commerce/claimable/ClaimableManager.validMaxCouponLimitReachedActions" atg.nucleus.ConfigurationException: throwException,removeLRU
net.sf.cglib.core.CodeGenerationException: java.lang.reflect.InvocationTargetException-->null
at net.sf.cglib.core.AbstractClassGenerator.create(AbstractClassGenerator.java:244)
at net.sf.cglib.reflect.FastClass$Generator.create(FastClass.java:64)
at net.sf.cglib.proxy.MethodProxy.helper(MethodProxy.java:121)
at net.sf.cglib.proxy.MethodProxy.init(MethodProxy.java:74)
Caused by: java.lang.reflect.InvocationTargetException
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at net.sf.cglib.core.ReflectUtils.defineClass(ReflectUtils.java:398)
at net.sf.cglib.core.AbstractClassGenerator.create(AbstractClassGenerator.java:226)
... 413 more
Caused by: java.lang.SecurityException: class "atg.nucleus.GenericService$$FastClassByCGLIB$$87da1193"'s signer information does not match signer information of other classes in the same package
at java.lang.ClassLoader.checkCerts(ClassLoader.java:806)
at java.lang.ClassLoader.preDefineClass(ClassLoader.java:487)
at java.lang.ClassLoader.defineClassCond(ClassLoader.java:625)
at java.lang.ClassLoader.defineClass(ClassLoader.java:615)
I did few analysis and found that there is a problem with cglib.jar in jboss. I know this is related to Jboss but will be helpful if someone can provide some pointers.
https://issues.jboss.org/browse/JBPAPP-8465?page=com.atlassian.jirafisheyeplugin:fisheye-issuepanel
https://issues.jboss.org/browse/JBPAPP-2971 - I did try the new jar (the top level message changed but the cause still remains intact.
Can anyone provide pointers to this.

Answer 1

You should be using the unsigned jar for the code generation library. You can download it from here:
http://sourceforge.net/projects/cglib/files/cglib2/2.2/cglib-2.2.jar/download
Replace the existing cglib jar (which is signed one) at <JBOSS>/jboss-as/common/lib/cglib.jar with the downloaded unsigned cglib jar. You can check the manifest file under the META-INF directory of the two JARs. The signed JAR's manifest file have entry for SHA1-Digest corresponding to each class packaged into JAR while the unsigned JAR which you should be using won't have anything like that.