Jar signing may be applied to WAR/EAR files?

Greetings,
I wonder if the WAR/EAR files (J2EE related) can be also affected by signing it. I mean, when a signed jar file is updated with class, the JVM will throw an error about the signature of that class doesn't match the class file.
Now, since a WAR/EAR file is a JAR file but with JAR files instead classes files, I wonder if signing a WAR/EAR file and if someone update it without signing, the application server (e.g., tomcat) will verify the signature?
If true, that would be just great since I may have resources (JSP files and similar stuff) that would be just great if I could verify its integrity.
thanks,
Pedro Salazar.

Indeed, but I was referring to remove the signature block and also the digests in the manifest file, - a clean (unsigned) jar file :-)
Now, I have question for you:
Is it possible to compel that a jar must be signed by a specific entity (certificate) to be validated? For instance, anyone could repack the jar in a clean jar file, and the system wouldn't care about that. So, I would like to say that the jar file to be validade must be signed by a specific entity. Is there any policy to say for a specific jar file? The problem here could be how to refer that to the jar file since it would be deployed in a application server...
Maybe I should open a new thread about this, but you may also clarify me this shortly...
regards,
Pedro salazar.

Similar Messages

Download .WAR/.EAR file from IAS 10g

Hello everybody,
I need to download .WAR / .EAR file from ORACLE Enterprise Manager 10g-Aplication Server Control.
I found my application there, it says: Path: ../applications/consoleDW.ear Where is the root of this path?
Thanks in advance!
Adam

Assuming you are using the OC4J instance called home, then it'd be $ORACLE_HOME/j2ee/home/applications.
If you are using an OC4J instance with a different name look in $ORACLE_HOME/j2ee/<name>/applications.
-steve-

Unable to deploy a simple WAR / EAR file on Standalone OC4J instance

All,
This issue is baffling me since yesterday and while I continue to look for options , would appreciate if anyone of you has run into something similar and give me some hints on how to proceed on this ..
I downloaded the Standalone OC4J ( 10.1.3 ) from otn.oracle.com and also downloaded JDK 1.5 Update 12 from the Sun Website and installed it on my local
Windows XP machine. Everything works well and the application gets deployed.
I then copied the 10.1.3 Standalone OC4J to the Solaris 5.9 box which already
has JDK 1.5 Update 12 installed. We extracted the OC4J to its own directory , set the Java_Home and the Oracle_Home environment variables and were able to
startup the OC4J instance.
However when trying to deploy even a simple HelloWorld.jsp file packaged as an EAR or WAR , we get these errors..
[Aug 8, 2008 9:40:27 AM] Application Deployer for CISS STARTS.
[Aug 8, 2008 9:40:27 AM] Copy the archive to /home/aplperdev1/ssp_java/oc4j/j2ee/home/applications/CISS.ear
[Aug 8, 2008 9:40:28 AM] Initialize /home/aplperdev1/ssp_java/oc4j/j2ee/home/applications/CISS.ear begins...
[Aug 8, 2008 9:40:28 AM] Unpacking CISS.ear
[Aug 8, 2008 9:40:28 AM] Error while unpacking CISS.ear java.util.zip.ZipException: error in opening zip file at java.util.zip.ZipFile.open(Native Method) at java.util.zip.ZipFile.(ZipFile.java:203) at java.util.jar.JarFile.(JarFile.java:132) at java.util.jar.JarFile.(JarFile.java:97) at oracle.oc4j.util.FileUtils.unjar(FileUtils.java:309) at oracle.oc4j.util.FileUtils.autoUnpack(FileUtils.java:488) at com.evermind.server.deployment.EnterpriseArchive.(EnterpriseArchive.java:234) at oracle.oc4j.admin.internal.ApplicationDeployer.initArchive(ApplicationDeployer.java:412) at oracle.oc4j.admin.internal.ApplicationDeployer.doDeploy(ApplicationDeployer.java:187) at oracle.oc4j.admin.internal.DeployerBase.execute(DeployerBase.java:93) at oracle.oc4j.admin.jmx.server.mbeans.deploy.OC4JDeployerRunnable.doRun(OC4JDeployerRunnable.java:52) at oracle.oc4j.admin.jmx.server.mbeans.deploy.DeployerRunnable.run(DeployerRunnable.java:81) at com.evermind.util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:298) at java.lang.Thread.run(Thread.java:595)
[Aug 8, 2008 9:40:28 AM] Operation failed with error: Unable to find/read file META-INF/application.xml in /home/aplperdev1/ssp_java/oc4j/j2ee/home/applications/CISS (META-INF/application.xml)
Using the above error messages , I certainly do not find the CISS.ear file getting copied to /home/aplperdev1/ssp_java/oc4j/j2ee/home/applications/CISS.ear
which explains the rest of the messages.
I have tried placing the EAR file both remote and local on the Application Server box but the results remain the same. Assuming it might be a permissions issue , we have opened up all the permissions on this OC4J home ( recursively )
to everyone ..
Is there a specific version of tar / unzip / jar required to deploy EARs / WARs on Solaris 5.9 running JDK 1.5 Update 12.
We had some issues when extracting OC4J to its directory but there were no errors displayed on the screen ... Only when we tried starting up the OC4J instance , it started complaining about missing XML files .. This was resolved by manually extracting the XML's from the corresponding jars and placing them in the proper directories ..
Also looked at Bug:6330834 but am not very sure if this applies to our case because all these drives are local to the Sun box.
Other than attempting a reinstall and opening an Service Request with Oracle , I am running out of ideas at this time ..
So any ideas / hints would be gladly accepted :)
Vishwa

When you say:
I then copied the 10.1.3 Standalone OC4J to the Solaris 5.9 box which already has JDK 1.5 Update 12 installed. We extracted the OC4J to its own directory , set the Java_Home and the Oracle_Home environment variables and were able to
startup the OC4J instance.
We had some issues when extracting OC4J to its directory but there were no errors displayed on the screen ... Only when we tried starting up the OC4J instance , it started complaining about missing XML files .. This was resolved by manually extracting the XML's from the corresponding jars and placing them in the proper directories ..
It sounds like you have some funky issues there with those missing XML files -- that is not expected or normal.
Do you mean you copied the same oc4j_extended.zip to the server and unzipped it, or you zipped up the directories you were using on the Windows box, copied that over, and unzipped it?
I don't know of any problems with Solaris, JDK5, U12.
What about if you do this to remove any issues with the remote copy aspect of the deployment.
1. Stop OC4J.
2. Manually copy CISS.ear to /home/aplperdev1/ssp_java/oc4j/j2ee/home/applications/
3. Edit the j2ee/home/config/server.xml file and add the entry to deploy the application
4. Edit the j2ee/home/config/default-web-site.xml and bind any web-modules you need.
5. Start the server and see what happens -- the application should be deployed.
Also, what happens if you use the $JAVA_HOME/bin/jar to try and view the contents of the CISS.ear file?
-steve-

Run a war/ear file in worhsop

hi,
I have a simple dynamic web project and i can run it in the workshop. Now if i want to export an archiv file, i tried using EAR. and export->ear
but when i import it, i dont really understand how do i make it run on the workshop again!
thank you !!

You export an EAR file from Workshop so you can deploy it to a separate WebLogic domain. You don't need to reimport it into Workshop again. If you want to run it from Workshop, just run your project against the local WebLogic instance.

Versioning JAR/WAR/EAR and CLASS files

Does anyone know of a standard, defined and recommended way of versioning JAR/WAR/EAR files?
I guess I can put version information in the Manifest.mf file, but is there a recommended way?
Another related question is how do I go about versioning individual class files?

There's not only a recommended way, but a standard way. See http://java.sun.com/products/jdk/1.2/docs/guide/versioning/spec/VersioningSpecification.html#PackageVersioning).
However, I've found that this practice is unfortunately not as widespread as one would like. sigh
What do you mean by "versioning" individual class files (in a JAR, I assume you mean)? In general that's a bad idea. But perhaps I misunderstand what you mean.

Problems while deploying a war file as a part of ear file

Hello!!!
          Is there a weblogic or Sun reference document to find out the correct way to specify library paths or class paths when one is trying to deploy a WAR file as a part of an EAR file?
          I have been having lot of trouble and very sporadic too in getting stuff to work correctly.
          -Eagle

OK! I found something the very hard way. For my J2EE application packaged as an ear file containing one ejb module in an ejb-jar file and one web module in my .war file; further, noting that my web module is a struts application; it appears that the dependent jar libraries should be placed in the EAR file and a MANIFEST classpath entry should be added to the ejb-jar file's manifest - even for the WAR to work correctly. the presence or absence of dependent jar files in the "lib" directory of the WAR file makes no difference for the working of the WAR file.
          Is this behavior that I am seeing on my weblogic 8.1 server a documented and expected behavior? I am not too sure. did anyone else have such an experience?
          Eagle
          > Hello!!!
          >
          > Is there a weblogic or Sun reference document to find
          > out the correct way to specify library paths or class
          > paths when one is trying to deploy a WAR file as a
          > part of an EAR file?
          >
          > I have been having lot of trouble and very sporadic
          > too in getting stuff to work correctly.
          >
          > -Eagle

Deploying war OR ear file in 10.1.3 standalone OC4J

I've read the several threads on how to deploy a war file and/or ear file for OC4J but haven't seen anyone having the same issue I'm having.
I've tried deploying manually, from the command line using admin.jar, as well as the enterprise manager. It appears that when OC4J is looking for a jar file containing EJB's. But my app has none and there is no jar file that it finds.
Here is what the console reports when I try to deploy using admin.jar ->
http://www.gordongridley.us/2007/02/oc4j-console-when-trying-to-deploy.html
OK - so I try to deploy using the Enterprise Manager instead to see if the UI has some options that I can change for not forcing an EJB jar file lookup. Here is a video of what I did ->
http://www.gordongridley.us/2007/02/attempting-to-deploy-war-using-oc4j.html
Do I really need to have a jar file with EJB's to deploy a WAR/EAR file?

Hi Gordon,
The source of your ills is this entry in the application.xml descriptor:
<module>
<ejb>TomaxCMAdmin.jar</ejb>
</module>
Remove that, and you should be good to go (assuming you aren't referencing any other non-existent JARs).
Thanks
Dan Hynes

Deployment and .ear files

I have two questions; one may relate to the other.
First, I would like to know the best way to deploy Session beans which have dependencies on other EJBs, be they Entity Beans or other Session Beans. The dependency is limited to the implementation class, not the interfaces. I have tried just putting all my EJBs in the classpath in startWebLogic.sh, but I get the "bean cannot be redeployed while the server is running" warning. Is there another way?
Second, I have read of .ear files, which seem to be a good way of dealing with many EJBs/JSPs en masse(I'm working with ~100 EJBs and ~2000 JSPs). However, I haven't found anything on exactly what they are, how to use them, or how to generate them.
If anyone has these answers, or can point me to a good site on the matter, I'd appreciate it.
Thanks, --Tom Seufert

Hi Tom,
The "best" way to generate EAR files is to use an IDE that has built-in
tools to do it -OR- to use ANT (kind of an xml-based gnu-make-like utility
for Java).
Most dev groups that I've seen start by using .sh/.cmd (i.e. batch) files to
generate the JAR/WAR/EAR files. ANT allows you to do things like
dependency-based builds, to avoid re-generating parts that are not
necessary. That was very handy with WL 5.1 when EJBC could take several
minutes (even running locally with a fast compiler like JIKES). (I have
only used ANT a tiny bit, but Jesse Tilly who frequents this newsgroup is an
expert with it.)
The EAR is just a means to bundle different parts of your application
together. For example, your EJBs will be bundled into a JAR, and your JSPs
will be bundled into a WAR, and you can put both into an EAR. WL6.0 will
accept an EAR file for deployment, will auto-deploy, and will even re-deploy
it if the EAR changes!
The easiest way to build a JAR or WAR or EAR file within a batch or build
file is to use the JAR command. If you have a directory structure that is
exactly how the JAR file will be layed out, then I believe the command is
"jar -cfm0 my.jar *" or "jar -cfm0 my.jar .".
Peace,
Cameron Purdy
Tangosol, Inc.
http://www.tangosol.com
+1.617.623.5782
WebLogic Consulting Available
"Tom Seufert" <[email protected]> wrote in message
news:[email protected]...
>
>
I have two questions; one may relate to the other.
First, I would like to know the best way to deploy Session beans whichhave dependencies on other EJBs, be they Entity Beans or other Session
Beans. The dependency is limited to the implementation class, not the
interfaces. I have tried just putting all my EJBs in the classpath in
startWebLogic.sh, but I get the "bean cannot be redeployed while the server
is running" warning. Is there another way?
>
Second, I have read of .ear files, which seem to be a good way of dealingwith many EJBs/JSPs en masse(I'm working with ~100 EJBs and ~2000 JSPs).
However, I haven't found anything on exactly what they are, how to use them,
or how to generate them.
>
If anyone has these answers, or can point me to a good site on the matter,I'd appreciate it.
>
Thanks, --Tom Seufert

Ear file cant be deployed from eclipse with jboss 3.2.7

I am using eclipse with JBOSS IDE1.5
I want to work with EJB in eclipse. I have created configured all neccessary directory structure , xml files and jar,war,ear files(using XDoclet Configureations).
But i am not able to deploy my "ear" file . At that time i am getiing following message in JBOSS Console.
16:48:41,937 INFO [EARDeployer] Init J2EE application: file:/F:/jboss-3.2.7/server/default/deploy/FiboApp.ear
16:48:42,421 WARN [verifier] EJB spec violation:
Bean : Fibo
Section: 22.2
Warning: The bean provider must specify the fully-qualified name of the enterprise bean's remote home interface, if any, in the <home> element.
Info : Class not found on 'tutorial.interfaces.FiboHome': No ClassLoaders found for: tutorial.interfaces.FiboHome
16:48:42,453 WARN [verifier] EJB spec violation:
Bean : Fibo
Section: 22.2
Warning: The bean provider must specify the fully-qualified name of the enterprise bean's remote interface, if any, in the <remote> element.
Info : Class not found on 'tutorial.interfaces.Fibo': No ClassLoaders found for: tutorial.interfaces.Fibo
16:48:42,453 WARN [verifier] EJB spec violation:
Bean : Fibo
Section: 7.10.1
Warning: The session bean must implement either a remote home and remote, or a local home and a local interface.
Any suggestions or remarks will be greatly appreciated
Thanks in advance
satheesh

Atlast it worked. The problem was that in my ejb-jar.xml I was referring to 2_0.dtd. I have changed that to 2.1 and it worked.
Older ejb-jar.xml had:
<!DOCTYPE ejb-jar PUBLIC "-//Sun Microsystems, Inc.//DTD Enterprise JavaBeans 2.0//EN" "C:/jboss-4.0.1sp1/docs/dtd/ejb-jar_2_0.dtd">
I changed that to:
<ejb-jar xmlns="http://java.sun.com/xml/ns/j2ee" version="2.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/ejb-jar_2_1.xsd">
And it worked.
-Sathish

How to recreate analytics.ear file - One BI Server,2 rpds, 2 Presen servers

Hi
I am trying to launch 2 rpds, 2 presentation servers on One BI Server in windows environment.
1. Scaled out BI Presentation Servers Vertically.
2. Created seperate DSN's for each rpd
3. Created two seperate webcatalogs with different paths to point to each presentation server directories.
4. Created two seperate instanceconfig.xml files with different Catalog paths
5. Configured nqsconfig.ini with two rpds
6. Configure and deploy analytics.ear/analytics.war files with two different ports and different names...
The issue is i unpacked the analytics.ear file and analytics.war file using 7zip and changed the ports i wanted to compress them back to create analytics2.ear and analytics2.war. How do i create analytics2.ear. I created using 7zip but while deploying the file i get error 'error in opening zip file analytics.ear c:\analytics\analytics.ear'. I am unable to create using command line options using as i get an error jar command is not recognized. Any help is appreiiated.
Thanks

Thanks, I am able to set the java path in windows environment and able to execute the jar command. It created a analytics2.ear file but when i try to deploy from the weblogic console it gives the following error..
[J2EE:160120]Error: The module, 'analytics.war', is declared either in the application.xml or in the weblogic-application.xml descriptor but cannot be found in the ear file.
Trying to research on the above. Any inputs are appreciated. I have the following files in my directory
1. analytics2.war
2.analytics2-ws.war
3. META-INF
They are in Analytics_war directory of windows. I am not able to use
jar -cf analytics.war -C app .
as it gives me an error that 'app\. folder does not exits. Replaced with Analytics_war assuming that it is looking to write the file to app folder still it did not work.
Thanks

How to deploy ear file with jar file and war file with different names

Hi,
As part of weblogic migration from WL 6.1 sp3 to WL 10, Iam facing some problem.
Problem:
I have one ear file(abc.ear) to deploy which contains one jar file(xyz.jar) and one war file(pqr.war).
In config.xml file of WL 6.1, it was mentioned as :
<Application Deployed="true" Name="abc" Path="./config/mydomain/applications/abc.ear">
<EJBComponent Name="xyz" Targets="myserver" URI="xyz.jar"/>
<WebAppComponent Name="pqr" Targets="myserver" URI="pqr.war"/>
</Application>.
The above is working fine.
But in config.xml file WL10,I cannot mention the same.
I need to have different application anmes for ear,jar and war.If I deploy as a ear file,the jar and war files are deployed with the same ear file name.
I tried the following options:
1) Deploying as a ear file by adding <sub-deployments>
2) Deploying both war and jar seperately which is not recommended in my application.
Please provide the content I should place in the config.xml so that everything works fine correctly.
Any help is appreciated.

Hi,
As part of weblogic migration from WL 6.1 sp3 to WL 10, Iam facing some problem.
Problem:
I have one ear file(abc.ear) to deploy which contains one jar file(xyz.jar) and one war file(pqr.war).
In config.xml file of WL 6.1, it was mentioned as :
<Application Deployed="true" Name="abc" Path="./config/mydomain/applications/abc.ear">
<EJBComponent Name="xyz" Targets="myserver" URI="xyz.jar"/>
<WebAppComponent Name="pqr" Targets="myserver" URI="pqr.war"/>
</Application>.
The above is working fine.
But in config.xml file WL10,I cannot mention the same.
I need to have different application anmes for ear,jar and war.If I deploy as a ear file,the jar and war files are deployed with the same ear file name.
I tried the following options:
1) Deploying as a ear file by adding <sub-deployments>
2) Deploying both war and jar seperately which is not recommended in my application.
Please provide the content I should place in the config.xml so that everything works fine correctly.
Any help is appreciated.

Jar, War or Ear file ?

Hi,
I am a total newbie in J2EE technology.
I am currently using Sun One Application. Using the sample application, it produces all the Jar, War and Ear files.
My understanding is Jar is produced to be a library-like usage.
War is for web application.
And Ear is for what?? oops EJB? Can someone tell me?
Anyway, my concern is, if I am to produce Ear, war, or Jar file after deploy, I have problems doing the testing. Let's say I want to modify the Jsp file, then I have to use ant to compile all, undeploy the instance and deploy again.
Any better way?

your jar files contain your EJBs, your WAR file contains your web application (JSPs, servlets and support) and these are all bundled into your EAR file. All of these files are just zip-formatted archives, you can look at them all via the jar tool (or something like WinZip, if you are so inclined). Each of these will contain a descriptor file (in XML format) - check out the J2EE spec on it.
Lee

JAR,WAR,EAR...

HI,
EJB modules are packaged as JAR files with a .jar extension.
Web modules, are packaged as WAR file (though it can be .jar )
Why we need to make it as .war file ?We can do it as .jar ?
But anyway why at time of delivry we create a EAR file ?what are the significance of making file differently ? Is it not posssible to make everything .jar and deliver it.

EJB modules are packaged as JAR files with a .jar
extension.
Web modules, are packaged as WAR file (though it can
be .jar )
Why we need to make it as .war file ?We can do it as
.jar ?To tell the servlet container what to do with it. It has to extract the WARs after all. I don't think it'd extract a JAR file if it were in te deployment directory.
Also keep in mind that WAR have additional content, like the Web.xml.
But anyway why at time of delivry we create a EAR
file ?Because it can contain more than just WARs. It also contains deployment modules for application servers.
what are the significance of making file
differently ? Is it not posssible to make everything
.jar and deliver it.Why do you care whether it's called .jar or .ear? Especially since there's a clear semantic difference, even if they all are just ZIP files.

Deploying servlets (not in jar/war/ear!) to OC4J?

I must be missing some very tiny but crucial issue....
For over 2 days now (shame) I have been trying but not
succeeding to deploy servlets to OC4J behind Apache. The 'behind
Apache'-part is easy. Just set up a proxy. This is because
Apache configuration is easy and well documented. But here is my
real problem. I am using JDev 3.2 (9i too large) and this is
what I want:
I want to code a servlet in Jdeveloper, compile it to a class-
file, not a jar, war, ear or whatever-r. Then I want to set up
OC4J in such a way that I can access my servlets from the
directory where the class files are. I do NOT want to use the
default-web-app subdirectory for obvious reasons. Please, how do
I set up OC4J to just look in my own classes-directory with my
own servlets???? No jar, no war, no ear.
I have been reading all sorts of information on this and tried
everything, but am not succeeding and getting all sorts of
error/not found messages.
Extra info:
I am using OC4J on windows. To start I use java -jar orion.jar,
to restart I use ^C and repeat the start command. Is that ok or
do I need to restart in a different way? I tried to setup OC4J
as a service but the link to runexecsvc went astray to judosoft
Any help will be greatly appreciated!

Avi,
Thanks for your swift reply. I have indeed read the docs, but
the exploded directory format does not seem to work for one
reason or another (got some error messages on file not found or
something). Have you succeeded in deployment using exploded
directories? If so, I would be greatly interested in your xml-
files and directory structure!
But, please do not spend too much time on this, because I have
now decided that I will deploy using a war. I have written a
small script to make a war out of my whole project and copy it
to de OC4J file system. This works and everybody is happy.
Thanks again,
Martijn

Difference between .jar, .war and .ear file

Hi,
I am pretty new to J2EE technology.
I would like to know what is the difference between .jar, .war and .ear files and how they are deployed on webserver.
Thanks,

Files with a .jar extension or JAR files, are essentially just a collection of files compressed using the ZIP/ZLIB compression format.
JAR (short for Java Archive) files were introduced in the early days of Java as a means to conveniently package and distribute Java applications and components. Since then, a number of additions to the Java platform have followed suit. The introduction of the EAR file is one such addition.
An EAR (Enterprise Archive) file is a JAR file that contains a J2EE application.
A J2EE application is a group of Web modules that collectively perform as a single entity.
A Web Module is an entity consisting of one or more resources such as HTML files, Java class files, XML files, etc. Web Modules are packaged in Web Archive (WAR) files.
Looking at it from a top-down view, EAR files contain JAR files and WAR files. Packaging resources in WAR files, JAR files and eventually EAR files, makes it easy to reuse and reassemble components as new J2EE applications and distribute them to new environments.
For example, Tomcat deals only with WAR files.
So, in order to auto-deploy a Web application to a Tomcat environment, you must place an application's WAR file in the appropriate directory or use Tomcat's deployment tools to manually deploy the file.
If you already have an EAR file that contains the WAR file, you can extract the WAR file and use it as is. If you do not have the EAR file or the WAR file, you can use any number of compliant tools to create the WAR file. Tomcat is a servlet/JSP container available from the jakarta.apache.org site.

Jar signing may be applied to WAR/EAR files?

Similar Messages

Maybe you are looking for