It's urgent : Signing the JAR

In my application there is a applet which tries to open a socket connection on client machine.
And as per JAVA specification it throws a security exception.
Which is absolutely right.
But I want to test this application.
Is there any utility or temporary signing clause which allows me to test the above thing with some limitations like u must have server and client (browser) running on same machine or anything.
Regards,
Sachin.

if you want to test it temporarily, sign the jar and install its certificate on your local machine and feel free to test the Applet. When finished, you can uninstall the certificate. If you need help about Java security, refer to the Java Security tutorial 1.2 at the sun tutorials.
Regards,
Mohammed Saleem

Similar Messages

Why need to sign the jar files ????

Hi
Why does i have to sign the jar files to run my app ??
are not another away to run the app???

U just have to sign your jar if your application needs full access to the client-resources.
http://java.sun.com/products/javawebstart/docs/developersguide.html
andreas

Sign the jar problem, HELP

Hi All
Now I can successfully use this command as below and and get the tmpfoo file
appletviewer http://java.sun.com/security/signExample12/signedWriteFile.html
while doing my sign the jar it come out the below message
jarsigner: Certificate chain not found for: duke. duke must reference a valid K
eyStore key entry containing a private key and corresponding public key certific
ate chain.
Also .java.policy file added as below by policytool
grant signedBy "Duke", codeBase "file:/c:/final_project/my.jar" {
permission java.io.FilePermission "<<ALL FILES>>", "read, write, delete, execute";
What can I do now :(

Are you trying to use a self signed certificate or one you obtained from Verisign, etc

Using System.getProperty in the app, but still not signing the jar file

Is there a way to use the System.getProperty call in the app but not sign the jar? I get the security exception when launched using WebStart?
Any help appreciated.

Yes. Don't use Web Start, and you'll have no problems.
Seriously, the security exception is there by design. If you must call System.getProperty, you need to sign your jars -- though personally, I think there are situations where signing your jars to make Web Start work is a needless complication.
However, if you still need a tool to deploy updates and such, I recommend Deploy Director from Sitraka.

There were warnings or errors while signing the jar - webutil

As oracle 10g comes with webutil, i am now trying to configure it with jocob and trying to run webutil_demo form, but I am getting bean not found error, I searched many forums but could not resolve my problem, everything seems to be at its place, but I am also getting error when i try to sign jacob.jar and webutil.jar files.
First is it necessary to sign these files if yes then what cause will be preventing it to be signed.
I am using forms AS 10.1.2, JRE 1.6, on Windows XP,
Looking for help
Thanks
Naveed

Hello,
+"...but I am also getting error ..."+
Are you a developer ? if so, what do you answer to your end-user when he/she calls you saying "I have an error" ?
Francois

How to sign multiple jar files using the same certificate..?

hi,
I want to run my application using Java Web Start.. i am using around 16 different jar files out of which around 13 are 3rd party component jars. I want to sign these jars using the same certifcate..., i am using the follwing code to sign the jars:
(for the jar file ischeduler.jar)
keytool -genkey -alias signFiles91 -keystore dtss -keypass dtss1351 -dname "cn=dtss" -storepass decisioncraft
jarsigner -keystore dtss -storepass decisioncraft -keypass dtss1351 -signedjar signedischeduler.jar ischeduler.jar signFiles91
keytool -export -keystore dtss -storepass decisioncraft -alias signFiles91 -file ischeduler.cer
keytool -import -alias DCA2 -file ischeduler.cer -keystore Impischeduler -storepass ischeduler
(for the jar file ischedulerclient.jar)
keytool -genkey -alias signFiles92 -keystore dtss -keypass dtss1351 -dname "cn=dtss" -storepass decisioncraft
jarsigner -keystore dtss -storepass decisioncraft -keypass dtss1351 -signedjar signedischedulerclient.jar ischedulerclient.jar signFiles92
keytool -export -keystore dtss -storepass decisioncraft -alias signFiles92 -file ischeduler.cer
keytool -import -alias DCA3 -file ischeduler.cer -keystore Impischeduler -storepass ischeduler
but when i use the above signed jars in my application i get an error saying:
"jars not signed by the same certificate"
can someone plz tel me wher is the error....thanx
andy

Well for mulitple signing of jar files you can use ANT tool. Its easier and faster.
Regarding the present problem -- hmm.. well it looks like you are using 2 different alias names for signing the jar file. Try using the same alias name and that might solve your problem.
regards
Saby

Issue while signing a jar using RSA certificate

Hi,
I am trying to sign a java applet using trusted certificate with the help of Java keytool and jarsigner of JRE1.6. For this I have followed the following steps:
1.Generated key pair in a keystore - keytool -genkeypair -keyalg RSA -alias eaikey -keystore eaikeystore -validity 3650 -keysize 2048
2.Generated CSR using command keytool -certreq -alias eaikey -file eaicert.csr -keystore eaikeystore and send the .csr file to the CA
3.CA has returned the certificate reply (.cer file)that contained a root certificate
4.When I tried to import the certificate using command keytool -import -file eaicert.cer -alias eaicertkey -keystore eaikeystore to keystore, initially it gave me error as Input not an X.509 certificate.So I opened the .cer file in my text editor and removed the texts before the Begin And End Certificate.Then it got imported correctly by running the
5.When I tried to sign the jar using command jarsigner application.jar eaicertkey -keystore eaikeystore
it gave the exception as jarsigner: Certificate chain not found for: eaicertkey. eaicertkey must reference a valid KeyStore key entry containing a private key and corresponding public key certificate chain.
Please help me with the step I am missing here.I doubt I am doing something wrong in the import step.
Thanks in advance.

you can mail me directly to [email protected], and I'll try to help.
no guarenty :-)
Tal
[email protected]

Error when trying to sign the Applet, please Help

Hello,
I have this Error when I am trying to sign my applet, after execut this command :
jarsigner -verify -verbose -certs test.jar
jarsigner: java.lang.SecurityException: invalid SHA1 signature file digest for classe/JDBC_SQL.class
And for your information, that I had add the JDBC_SQL.class to the jar file (test.jar) because I made some change to the file JDBC_SQL.java
so please if you know what can I do to resolve my problem
Thank you to reponse !
rania +

ahh, here is a problem. u made changes to the JDBC_SQL.java and packed the jar file. u have to sign the jar file again.
let me know if u need futher assistance

Signing a jar file

Guys, I've googled the crap out of this one. I need some help signing a jar file.
Here is what I'm doing:
1. Generating a key:
keytool -genkey -keystore myKeyStore -alias myName2. Trying to sign the jar file:
jarsigner -keystore myKeyStore -storepass myPassword -keypass myNamePassword myJar.jar myNameHere is the error I'm getting:
jarsigner error: java.lang.RuntimeException: keystore load: Invalid keystore formatI'm using Ubuntu Linux.
I wrote and built my project with Netbeans.
Any ideas?

Here is what the latest process looks like. What am I doing wrong?
thomasaaron@ubuntu:~/Desktop$ keytool -genkey -alias thomasaaron -keystore myKeyStore
Enter key store password: password1
Enter key password for <thomasaaron>: password2
You are about to enter information that will be incorporated into
your certificate request. This information is what is called a
Distinguished Name or DN. There are quite a few fields but you
can use supplied default values, displayed between brackets, by just
hitting <Enter>, or blank the field by entering the <.> character
before hitting <Enter>.
Common Name (hostname, IP, or your name): Thomas Aaron
Organization Name (company) [The Sample Company]: Tom's Company
Organizational Unit Name (department, division): Tom's Department
Locality Name (city, district) [Sydney]: TommyLand
State or Province Name (full name) [NSW]: Colorado
Country Name (2 letter code) [AU]: US
thomasaaron@ubuntu:~/Desktop$
thomasaaron@ubuntu:~/Desktop$
thomasaaron@ubuntu:~/Desktop$ jarsigner -storepass password1 -keystore myKeyStore SupportManager.jar thomasaaron
jarsigner error: java.lang.RuntimeException: keystore load: Invalid keystore format

Error while signing jacob.jar in FMW 11g

Hi,
after setting the PATH like:
set PATH=C:\Programme\ORACLE11g\Oracle\Middleware\PFRD11g\jdk\bin;%PATH%
while signing the jacob.jar file for the first time after installing 11g Forms in Windows the following error occurs:
C:\Dokumente und Einstellungen\bten>C:\Programme\ORACLE11g\Oracle\Middleware\ins
tances\FRinst\bin\sign_webutil.bat C:\Programme\ORACLE11g\Oracle\Middleware\PFRD
11g\forms\java\jacob.jar
Generating a self signing certificate for key=webutil2...
Keytool-Fehler: java.lang.RuntimeException: Verwendungsfehler: 360 ist kein g³lt
iger Befehl.
There were warnings or errors while generating a self signing certificate. Pleas
e review them.
Backing up C:\Programme\ORACLE11g\Oracle\Middleware\PFRD11g\forms\java\jacob.jar
as C:\Programme\ORACLE11g\Oracle\Middleware\PFRD11g\forms\java\jacob.jar.old...
1 Datei(en) kopiert.
Signing C:\Programme\ORACLE11g\Oracle\Middleware\PFRD11g\forms\java\jacob.jar us
ing key=webutil2...
jarsigner error: java.lang.RuntimeException: keystore load: C:\Dokumente und Ein
stellungen\bten\.keystore (Das System kann die angegebene Datei nicht finden)
There were warnings or errors while signing the jar. Please review them.
C:\Dokumente und Einstellungen\bten>
What is the reason, and how can I solve this?
Thanks Bea

Perhaps you are using old WLST code (used for OSB 10g), with OSB 11g.
The ALSBConfigurationMBean (com.bea.wli.sb.management.configuration.ALSBConfigurationMBean) Interface in the com.bea.wli.sb.management.configuration package in the Oracle Fusion Middleware Java API Reference for Oracle Service Bus includes example code illustrating how to import and export Oracle Service Bus 11g configurations, how to change environment values, how to query resources, and so on. Please find it here -
http://download.oracle.com/docs/cd/E14571_01/apirefs.1111/e15033/toc.htm
Regards,
Anuj

Import the jar file of jfreereport to bluej

i'm having trouble importing the jar file needed to use the jfreereport in bluej.
as much as possible i don't want to type the SET CLASSPATH in the command window. is there a way to include the jfreereport jar file to be used in the bluej?

You're doing privileged operations almost everywhere in this applet so you can't use the straightforward calls. At a minimum you need to put your applet in a jar, sign the jar and use AccessController.doPrivileged() to wrap the code which does the privileged operations, which is basically all of your code. In other words, you would need one to wrap your code in init(), one in start(), one in actionPerformed(), etc.

Signing the java application

Hi,
I have written an application in java6 and created a exe wrapper using jsmooth. Every thing is working fine. When I run my application, I gets prompted for "authorized exe". So I need to signing my exe.
My question is How can I do code signing for my application
a). Either I sign the jar and then creating exe
b). Or I need to sign the exe
Thanks

JL.Nayak wrote:
Hi,
I have written an application in java6 and created a exe wrapper using jsmooth. Every thing is working fine. When I run my application, I gets prompted for "authorized exe". So I need to signing my exe.
My question is How can I do code signing for my application
a). Either I sign the jar and then creating exe
b). Or I need to sign the exeThat depends on what you want to achieve. If some Java mechanism tells you that you need to run signed code, then you probably need to sign the jar files, if Windows or some other software doesn't allow you to run unsigned code, then you probably need to sign the exe file.
Anyway we'll need a lot more information (and especially more accurate information) to be able to help you 'I gets prompted for "authorized exe"' is not useful information post the exact message you get and what exactly you did before that message popped up.

Digitally sign a jar file for distribution?

I recently got a jar of mine hosted for client use though a web page.
The problem is that the jar needs to access the internet for several functions. JWS prompts the user for security reasons every time it makes a connection to a new url endpoint. Since one operation alone can hit 56 url's i thought this could be a bit of a hassle to the users.
The solution, as I understand it to be, is to digitally sign the jar file, so the user is prompted once on download.
I found a site ascertia which offers free certificates, but for the life of me I canb not get this to work.n I have seen keytool generate numerous errors, none of which mean anything to me. (too long >59, cant read chain from reply, invalid cert)
Does someone know a clear and thorough tutorial on digital code signing and certs? Or a CA that provides certs for free, and has some instructions to go along?
Thanks so much.
The step i have trouble on is turning the CSR into a cert, and importing the returned cert back into the keystore.

Masterkeedu wrote: !! It worked.
Congratulations. :-)
Masterkeedu wrote: So it's not certified, but is signed.
So as I understand this, it means the end-user has no way to know it was me that truly signed it. But relies on their common sense I suppose.
That is correct. The CA has verified, and is certifying, that you are who you claim to be. If you or I use a 'self signed' certificate, it does not carry the same level of trust. As you might understand already, the dialogs are different between the two certificate types, and some users cannot accept trusted code from an unverified (self-signed) certificate.
I have been meaning to write a page on the differences between the two certificates. It is well worth looking into getting a cert. from a CA.
There was a stage when one of the major CAs were offering 'freemail' certificates that came emblazoned not with your name, but 'free mail' itself. I did not like them because of that, and continue to use a self-signed certificate.

Can I progamatically sign a jar file? i.e. w/o jarsigner tool

Hi,
I am new to development and am using Ant to build my packages.
I need to sign the jar files that I produce, and now the only way I know how is with jarsigner.
I'd like to find a way to do the signing within Ant, but can't find one.
Is that possible?
George

I'm having trouble with the opposite: I'm trying to verify a signed jar programmatically.
I've already read this article, and thought that I could do similar things in order to verify.
However, this code uses classes from sun.security.util, and I couldn't find any documentation of this package.
Any suggestion will be greatly appreciated!

Problem Signing midlet .jar file.

Hi,
Step - 1 :
======
- I have created a keystore first like.
- c:> keytool -genkey -alias <alias> -keystore c:/abcd.sks -keyalg RSA*
o/p : So it created a keystore.
Step - 2:
======
- I imported my certificate from Verisign into the keystore..
- keytool -import -alias <alias> -keystore c:/abcd.sks -file <CompanyCert.cer>
o/p : The certificate imported successfully.
Problem :
=======
Problem occurs at the time of signing the jar file with jarsigner
jarsigner Myjar.jar <alias>
o/p :Jar is signed and It says, "your certificate will expire in six months". But our certificate has an expiry in 2011.
Also when the jar file installed in the mobile, it occurs as an invalid application.

The following may help you..
JavaJar(written by java) can compress and decompress jar,war, ear and.zip...
it can deal with manifest file and executable .jar file .specially.
may download from http://www.qwerks.com/download/4114/JavaJar.zip
the tool is very verygood tool.
but the homepage(www.pivotonic.com) of JavaJar cannot be accessed.
it is funny.
good lucky.

It's urgent : Signing the JAR

Similar Messages

Maybe you are looking for