Error: provider may not be signed by a trusted party

I am running with the latest Cryptix JCE, and I getting "provider may not be signed by a trusted party" error when using the Cipher Engine. I ran with the supplied cryptix-jce-provider.jar file and one that is signed by me using a code signing certificate obtained from SUN. I have the same error in both cases. The error message said that the jar should not be signed by a trusted party, but I think it is supposed to mean it is not signed by a trusted party. Does anybody know what's is going on, and why am I getting this error?
- Tak

I do not have this problem if I am running as root. But if I am a normal user, I am getting this error or "cannot find any provider supporting RSA/ECB/PKCS#1 depending on what I am doing. Please note that I am putting the provider jar file in the jre/lib/ext directory. If I run my test with the provider specified as part of the classpath, then it worked OK regardless who I am. Does anybody have any ideas?
- Tak Sze

Similar Messages

The provider BC may not be signed by a trusted party

Hi all,
I have encountered the runtime error of...
[error] java.lang.SecurityException: The provider BC may not be signed by a trusted party [error]
...while using j2sdk1.4.2_04
Meanwhile the same piece of test code didn't prompt any error if I use jdk1.3.1_06
I guess I have done the necessary steps:
- install the unrestricted policy files at <JAVA_HOME>/jre/lib/security
- place my bcprov-jdk14-122.jar at <JAVA_HOME>/jre/lib/ext
What's really wrong? Can someone please guide? Many thanks in advanced...

FYI, I also done the following steps according to thread at http://forum.java.sun.com/thread.jsp?thread=487735&forum=9&message=2293004
>
Solution: Place the following archive files in the directory %java_home%/jre/lib/ext:
- the unrestricted JCE archives; local_policy & US_export_policy (available for download)
- the jce archive from %java_home%/jre/lib/security
- you should also already have the sunjce_provider but in case you are missing it add it here also
However, according to this...
>
You can try placing all security related jars(US_export_policy.jar,sunjce_provider.jar,Jce1_2_2.jar,local_policy.jar) on the following folder jdkhome\jre\lib\ext.
Why do I need to place Jce1_2_2.jar in my ext path since I am already using j2sdk1.4.2_04?

The provider SunJCE may not be signed by a trusted party...

Hi all, first time poster, long time reader
I am having a bit of an issue getting encryption to work in Java and I thought I'd ask for some tips. I have scoured the 'net by and far, read every thread here and still I am at a loss.
Background:
OS: WinXP
Java ver: j2sdk 1.4.2_01
IDE: Eclipse 3.0.1
Location: Canada (Maybe this is the trouble, dunno)
End goal: two way encryption to enable storage & retrieval of data for a school project
I have boiled down the error producing code to this:
package security;
import java.security.*;
import javax.crypto.*;
public class JCEProviderCheck {
    public static void main(String[] args) {
        Provider p = Security.getProvider("SunJCE");
        System.out.println("My provider name is " + p.getName());
        System.out.println("My provider version # is " + p.getVersion());
        System.out.println("My provider info is " + p.getInfo());
        System.out.println ("Home: " + System.getProperty("java.home"));
        Security.addProvider(new com.sun.crypto.provider.SunJCE());
        try {
            Cipher c = Cipher.getInstance("DES", "SunJCE");
            System.out.println("My Cipher algorithm name is " + c.getAlgorithm());
        } catch (Exception e) {
            e.printStackTrace(System.out);
}The output:
My provider name is SunJCE
My provider version # is 1.42
My provider info is SunJCE Provider (implements DES, Triple DES, AES, Blowfish, PBE, Diffie-Hellman, HMAC-MD5, HMAC-SHA1)
Home: C:\Program Files\j2sdk1.4.2_01\jre
java.lang.SecurityException: The provider SunJCE may not be signed by a trusted party
     at javax.crypto.SunJCE_b.a(DashoA6275)
     at javax.crypto.Cipher.a(DashoA6275)
     at javax.crypto.Cipher.getInstance(DashoA6275)
     at security.JCEProviderCheck.main(JCEProviderCheck.java:29)I have checked and re-checked both java.policy and java.security plus made sure the following jars are in %JAVA_HOME%\lib\ext:
local_policy.jar
sunjce_provider.jar
US_export_policy.jar
Is there some glaringly obvious step I have overlooked? Any help would be greatly appreciated
-Kev

I am seeing a related bug to this under jdk1.5_04 / Win32. Very strange behavior...
KeyAgreement keyAgreement = KeyAgreement.getInstance( algo );
intermittently throws an exception:
Caused by: java.security.NoSuchAlgorithmException: Error constructing implementation (algorithm: DiffieHellman, provider: SunJCE, class: com.sun.crypto.provider.DHKeyPairGenerator)
at java.security.Provider$Service.newInstance(Provider.java:1155)
at sun.security.jca.GetInstance.getInstance(GetInstance.java:220)
at java.security.KeyPairGenerator.getInstance(KeyPairGenerator.java:177)
... 54 more
Caused by: java.lang.SecurityException: class "com.sun.crypto.provider.DHKeyPairGenerator"'s signer information does not match signer information of other classes in the same package
at java.lang.ClassLoader.checkCerts(ClassLoader.java:775)
at java.lang.ClassLoader.preDefineClass(ClassLoader.java:487)
at java.lang.ClassLoader.defineClass(ClassLoader.java:614)
Trying the same on RH Linux works fine.
PS. I am in the US and we did not unpackage/repackage the JARS.

The provider ABA may not be signed by a trusted party

I am trying to upgrade from 1.3.1_06 to 1.4.2_10 and I have an issue using the JCE solution I currently use. I have managed to sign the jce.jar file and have put it in the /lib/ext/ directory so it's permissions have all been correctly set. I have also exported the signing certificate and imported it into the CACERTS file, I am still however getting the error in the subject, Can anyone help with this.

Is this a provider that provides JCE functionality (Cipher/KeyAgreement/MAC/etc.)? If so, did you sign with a JCE code signing cert issued from Sun, or from a cert you created?
Also, I would suggest maybe using a different name than jce.jar, so you don't inadvertantly create confusion with the Sun jce.jar file.

Problem: MyProvider is not signed by a trusted party

Hi, I'm Patrik, from university of Bologna, Italy.
I'm developing a small application that include 6 different Ciphers. Some of this ciphers are "strange" like Caesar's Ciphers, and are not available in standard Providers; then I've decided to implement my own provider.
To begin I've implemented only One provider, called "MyProvider", I've compiled it, then I've build a JAR file. Then I've put it into the directory "{$Java.Home}"/lib/ext . Then I've tested It, but I receive the error message:
The provider MyProvider may not be signed by a trusted party.
I've tried to do it work in a lot of ways:
(1) Signing the JAR
(2) Modifyng permissions in java.security and in java.policy
(3) Downloading the unlimited strebgth jurisdiction files.
But I always receive the same error Message. It's a nightmare !!
It's possible to build a provider for JCE and do it work on my Computer ?
( I'm using jdk1.4.1 )
Thanks in advance : Patrik ( [email protected] )

The Sun JCE will only instantiate Providers that are signed by Sun - and they'll only sign Providers for "major vendors". To implement your own Provider, I believe you need to find a "clean room" replacement for the jce.jar, and use it instead of the one in the JDK. I don't have any pointers handy, but I'm pretty sure there is such a beast out there - perhaps someone else can provide us with a URL.
Grant

Failed to create an IDataAdapter object. This provider may not be fully supported with the Execute SQL Task

I executed a simple query inside an execute SQL task -
SELECT col1, col2
from thetable
where code = ?
order by id asc
Exec sql task - ADO.NET connection
parameter "code" is an int32 in SSIS and int32 in parameter mapping of exec sql task.
It works fine in SQL server, but in SSIS it causes the error -
[Execute SQL Task] Error: Executing the query "SELECT col1, col2
from thet..." failed with the following error: "Failed to create an IDataAdapter object. This provider may not be fully supported with the Execute SQL Task. Error message 'Incorrect syntax near '?'.'.". Possible failure reasons: Problems with
the query, "ResultSet" property not set correctly, parameters not set correctly, or connection not established correctly.
How do I fix this error ?

Thanks. I think it was sqlclient. I changed it to OLEDB to avoid that issue. Btw, what is this "provider" ?
Hi blastoSO,
To check which provider is used by the current ADO.NET Connection Manager, you can open the “Configure ADO.NET Connection Manager” window, and check the “Managed Provider” option of each Data connection.
In an Execute SQL Task, if the managed provider is “System.Data.SqlClient”, we should use the rule for the ADO.NET connection type in the following table. If the managed provider is “System.Data.Oledb” or “System.Data.Odbc”, it actually uses the OLE DB provider
or ODBC provider, so we should use the rule for the OLE DB or OBC rule in the following table:
Reference:
http://technet.microsoft.com/en-us/library/cc280502.aspx
Regards,
Mike Yin
TechNet Community Support

Kerberos says JCE provider may not be installed

I am using the Krb5LoginModule from JDK1.4.2_04 (deployed with BEA Weblogic 8.1) to authenticate against Active Directory. Have been looking at this for an age. Initial issues were due to case sensitive user names (something I didn't expect since because windows login doesn't care).
Anyway the current issues is as follows:
Authentication failed:
JCE provider may not be installed. Cannot find any provider supporting DES/CBC/NoPadding
javax.security.auth.login.LoginException: JCE provider may not be installed. Cannot find any provider supporting DES/CBC/NoPadding
     at com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Krb5LoginModule.java:585)
     at com.sun.security.auth.module.Krb5LoginModule.login(Krb5LoginModule.java:475)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:324)
     at javax.security.auth.login.LoginContext.invoke(LoginContext.java:675)
     at javax.security.auth.login.LoginContext.access$000(LoginContext.java:129)
     at javax.security.auth.login.LoginContext$4.run(LoginContext.java:610)
     at java.security.AccessController.doPrivileged(Native Method)
     at javax.security.auth.login.LoginContext.invokeModule(LoginContext.java:607)
     at javax.security.auth.login.LoginContext.login(LoginContext.java:534)
     at ADLoginTest.main(ADLoginTest.java:45)
Caused by: KrbException: JCE provider may not be installed. Cannot find any provider supporting DES/CBC/NoPadding
     at sun.security.krb5.internal.crypto.a0.a(DashoA6275:285)
     at sun.security.krb5.internal.crypto.a0.a(DashoA6275:258)
     at sun.security.krb5.internal.crypto.a0.a(DashoA6275:335)
     at sun.security.krb5.EncryptionKey.<init>(DashoA6275:198)
     at com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Krb5LoginModule.java:569)
     ... 12 more
Caused by: java.security.NoSuchAlgorithmException: Cannot find any provider supporting DES/CBC/NoPadding
     at javax.crypto.Cipher.getInstance(DashoA6275)
     at sun.security.krb5.internal.crypto.a0.a(DashoA6275:283)
     ... 16 moreIn the Kerberos configuration file, specified on the command line I have the following authentication mechanism specified:
[libdefaults]
    default_realm = <removed/>
    default_tkt_enctypes = DES-CBC-MD5 DES-CBC-CRC
    default_tgs_enctypes = DES-CBC-MD5 DES-CBC-CRCThe funny thing is this worked previously, and has only come up today. The following jars are all on the classpath (inside eclipse JRE definition) rt.jar, jce.jar, sunjce_provider.jar and java.security appears to be configured correctly:
security.provider.1=sun.security.provider.Sun
security.provider.2=com.sun.net.ssl.internal.ssl.Provider
security.provider.3=com.sun.rsajca.Provider
security.provider.4=com.sun.crypto.provider.SunJCE
security.provider.5=sun.security.jgss.SunProviderAny ideas what could be the problem? I even tried to reboot just in case. Does this seem like an issue with the Java application(client) or on the Active Directory (server)?
Any help greatly appreciated ...

This worked for me!! <p>I had the same problem, it was working and I was trying various things (e.g. bouncy castle provider) to try and get RC4-HMAC(NT) encryption to work. And then the DES mode stopped working - I must have switched from the JDK to the JRE at some point. Both the JRE and the JDK have the same list of providers in the security policy file java.security - so why using the JDK works and the JRE doesn't is weird. Hopefully it is just an eclipse thing - I'll have to deploy this stuff to clients with only the JRE one day.
<p>
Thanks for that tip!

Digital Signature error - "Document could not be signed"

I have a servlet (from the documentation sample) the rendered my form online. My form was saved from Designer as Acrobat 7.0.5 Static PDF Form File and then I applied Reader Extensions to it to allow for Digital Signatures and Basic Form Fill In. When I try to digitall sign the form, I get the error:
"The document could not be signed."
"There was an error when attempting to commit this signature. The document was not saved."
"A file error has occurred."
Anyone know what this means and how do I fix it??
I am using Acrobat Reader 7.0.8, so maybe that is the problem, but I won't know what version Reader my user's will have, so it needs to work in many versions.
If I don't sign the form, I can submit it where a second servlet saves the form to a file and this happens successfully.
Thank you,
Jennifer

Hello Rob,
Thanks for the reply.
Actually, there is a bug with Reader and Form Rendered forms - at least with already extended pdf forms that get rendered via Form Server.
So, I hope this makes sense, but this is what I have determined (this is all done with viewing the EXTENDED PDF form WITHIN a WEB BROWSER):
If I use a simple hyperlink (i.e. plain html anchor tag) to my PDF form, I can digitally sign the form with no problem within in all 7.x versions of Reader.
If I utilize Form Server code (tested with local EJBClient and then remote JBoss using SOAPClient) then the results vary:
Reader 7.0.0 - I could successfully sign the form
Reader 7.0.5 - I could successfully sign the form
Reader 7.0.7 - I could NOT sign the form
Reader 7.0.8 - I could NOT sign the form
Reader 8.0.0 - I could successfully sign the form
So, you can see in version 7.0.7 and 7.0.8, one cannot digitally sign a form if it was rendered via Form Server and viewing the form in the web browser, but I can sign it just fine if I display the form via a simple html hyperlink, so that is what I am doing now.
I had this same issue when using Workflow server, but that was easy enough to apply the Reader Extension QPAC over and over as needed. I need these forms to be submitted on a remote server and haven't figured out yet how to apply the Reader Extension remotely yet.
I hope this helps.
Jennifer

Java.lang.SecurityException: The provider SunJCE may not be signed by a tru

Hi All,
I am trying to implement AES using SunJCE,
I am running it with j2sdk1.4.2_09
from Eclipse 3.1
the jar file is as is and was not tampered with, tried with bouncy castle and still get the same error, is it to do with eclipse, if yes suggest work around
Here is the code
import javax.crypto.Cipher;
public class PrecedenceTest
public static void main(
String[] args)
throws Exception
Cipher cipher = Cipher.getInstance("AES", "SunJCE");
System.out.println(cipher.getProvider());
Please advice me as to what is wrong
Thanks in advance
slogger

This is a FAQ here.
http://forum.java.sun.com/thread.jspa?forumID=9&threadID=611770

Provider Not Signed By Trusted Party

When I make the call:
Cipher.getInstance("RSA", "BC"); , I get the exception:
java.lang.SecurityException: The provider BC may not be signed by a trusted partyNow what?
FWIW, my java.policy file has the followign entry in it (not sure if this is relevant):
grant codeBase "file:${java.home}/lib/ext/*" { permission java.security.AllPermission;};

It's likely that you've tried to compile the provider by yourself, or the provider is not installed correctly.
Or, you've made changes to the BC jar.

Unexpected: "may not have a type qualifier" error

Hi,
When I uses a 3rd party auto pointer utility, an unexpected "may not have a type qualifier" error raised. I hacked into the code and able to reproduce the problem with the following program.
Any one have workaround or solution for it?
Thank you very much.
Compiler version:
$ CC -V
CC: Sun C++ 5.7 Patch 117830-09 2006/11/01
OS version:
$ uname -a
SunOS niss165 5.10 Generic_118833-20 sun4us sparc FJSV,GPUZC-M
Compilation output:
$ CC main3.cpp
"main3.cpp", line 11: Error: func1 may not have a type qualifier.
"main3.cpp", line 45:     Where: While instantiating "AutoPtr<BarFoo<Bar, Foo<T>>>::~AutoPtr()".
"main3.cpp", line 45:     Where: Instantiated from non-template code.
"main3.cpp", line 11: Error: Cannot use AutoPtrRep<BarFoo<Bar, Foo<T>>>* to initialize int.
"main3.cpp", line 45:     Where: While instantiating "AutoPtr<BarFoo<Bar, Foo<T>>>::~AutoPtr()".
"main3.cpp", line 45:     Where: Instantiated from non-template code.
2 Error(s) detected.Test Program:
template <class A>
class AutoPtr
public:
    AutoPtr(void)
    ~AutoPtr(void)
        AutoPtrRep<A>::func1(rep); // compilation error
private:
    AutoPtrRep<A>* rep;
template <class C>
class AutoPtrRep
public:
    static void func1(AutoPtrRep<C>*& rep)
        // do something
class Bar
template <class T>
class Foo
template <class E, template <class T> class F>
class BarFoo
int main()
    // lead to compilation error
    AutoPtr< BarFoo<Bar, Foo> > ptr;
    // no error
    //AutoPtr< Bar > ptr;
    // no error
    //AutoPtr< Foo<int> > ptr;
}Message was edited by:
germancheung

This bug is fixed in the Sun C++ 5.8. If you have a
service contract you can escalate this problem for
Sun C++ 5.7. It looks like there is no workaround for
this bug.BTW, do you have the bug ID for this specific error? coz I need to show evidence for it to give reason for an upgrade.
Thanks.

Resources could not be signed: sapj2eeclient.jar

I have a XI3.0 system on SP13. As usual after applying support packages my sapj2eeclient.jar disapears. I copy it to the relevant directory and repository directories, redeploy SAPJ2EECLIENT.SDA and choose "Re-initialization and force signing" from the Java web start administration. This has worked on our other systems. Bot not anymore! If I try to start Integration builder I get this error message: "Unsigned application requesting unrestricted access to system"
And when I check the initialization status I get this error: "Resources could not be signed:
sapj2eeclient.jar"
The <sid>adm user has access to the sapj2eeclient.jar file.
Help!

Hi,
There is a possibility to resign the client.
Go to the URL http://XIMACHINE:50x00/rep/start/index.htm and click on the administration link.
Then you will see 3 tabs on the left part of the screen:
repository
directory
runtime workbench.
For both the repository and the directory you need to go to the link for "java webstart adminstration".
In the java webstart administration screen there is a possibilty to re-initialize and resign the client.
Best regards,
Alwin

Not able to login PIA - An error has occurred. You may attempt to sign in again. If your attempt fails, please contact your System Administrator

One of the user is getting the below error when the person is trying to login ELM system. what could be issue for the specific user and how do we resolve this issue?
"Not able to login PIA - An error has occurred. You may attempt to sign in again. If your attempt fails, please contact your System Administrator"

Its works for other users, its only happened for one specific user only? I didn't check the APPSRV.LOG file? what needs to be checked in APPSRV.LOG, I can ask my infra team to check, because I don't have app server access to check log file.

Error encountered while signing. Windows cryptographic service provider reported an error. Object not found. Error code:2148073489. Windows 7, Adobe Reader XI, Symantec PKI, Smart Card and CAC. I have seen other threads for this error but none have a reso

Error encountered while signing. Windows cryptographic service provider reported an error. Object not found. Error code:2148073489. Windows 7, Adobe Reader XI, Symantec PKI, Smart Card and CAC. I have seen other threads for this error but none have a resolution. Any help would be appreciated.
Sorry for the long title, first time poster here.

This thread is pretty old, are you still having this issue?

Interesting angle on 'Provider cannot be found. It may not be properly installed' error

Hi, I am getting the "Provider cannot be found. It may not be properly installed" message when running a .bat->VBScript script using Windows Task Scheduler. I am not seeing a solution in Google searches. Possibly I am not seeing the similarities because of a lack of detail in posts. Who knows.
Info as follows:
- Installed ODAC1120320_x64.zip using my personal user account.
- Using my personal user account there is no problem. I use file explorer to run a .bat file that in turn calls the VBScript.
- Using the System account and Windows Task Scheduler the script fails with the above error.
- File ACLs for the Oracle home\..\bin directory give full control to the System account
- ACLs for the ORAOLEDB.Oracle registry key gives access to the System account. I am assuming that all other key-value pairs involved in this problem have the same ACLs.
- Hosted on Windows 2008 (VM)
- The scripting language is VBScript, called from a .bat file. Task Scheduler calls the .bat file.
- The scheduled task has the "Run with highest privilages" box checked (same problem with the box unchecked).
- This configuration and script works well on an older Windows 2003 (dedicated) server
- Connection string:
"Provider=ORAOLEDB.Oracle;" &_
"User ID=[DB Schema Name];Password=[password];" &_
"Data Source=[TSN name];"
- I can mess with aspects of the TSN name and file without a change in the error message
Thanks for your help.
Nathan

We got the same error under windows 2003 SP2 and Oracle 10g release 2. Is there any problem with this provider in this release? We installed downgrade version of this provider, it is working. Is there any other way to avoid this error without going for downgrade?

Error: provider may not be signed by a trusted party

Similar Messages

Maybe you are looking for