Jar Signing // Missing Digest entries

I have a signed jar's manifest file which does not contain all of the classes ( digest entries) archived in the jar. Shouldn't this be one to one -jar classes to digest entries? Is there a reason why some classes are omitted, whereby others are included? I receive a NoClassDefFoundError when the applet loads when attempting to run a static method from a class which does not have a digest entry. The class throwing the exception is in the same jar as the applet, yet in a different package. Version: 1.6.0_15.
Edited by: rapunzel on Feb 20, 2010 4:46 AM

I just tried again, here my result, so you can see if something is wrong or missing:
1 - C:\Sun\SDK\jdk\bin>keytool -genkey -v -keyalg dsa -alias MYALIAS -keypass mypass -keystore MYKEYSTORE -storepass mykeystorepass
What is your first and last name?
[Unknown]: MYNAME
What is the name of your organizational unit?
[Unknown]: SCCM
What is the name of your organization?
[Unknown]: MYCOMPANY
What is the name of your City or Locality?
[Unknown]: LISBON
What is the name of your State or Province?
[Unknown]: LISBON
What is the two-letter country code for this unit?
[Unknown]: LX
Is CN=NOESIS, OU=SCCM, O=NOESIS, L=LISBON, ST=LISBON, C=LX correct?
[no]: YES
Generating 1.024 bit DSA key pair and self-signed certificate (SHA1withDSA) with
a validity of 90 days
for: CN=NOESIS, OU=SCCM, O=NOESIS, L=LISBON, ST=LISBON, C=LX
[Storing MYKEYSTORE]
2 - C:\Sun\SDK\jdk\bin>jarsigner -keystore MYKEYSTORE -storepass mykeystorepass -key pass mypass GID.jar MYALIAS
Warning:
The signer certificate will expire within six months.
3 - C:\Sun\SDK\jdk\bin>jarsigner -verify GID.jar
jar is unsigned. (signatures missing or not parsable)
So, as you can see, this really is not working for me :s
I've tried different approaches, an none worked, why can't i sign a .jar file??..this is really weird, i thought creating an applet to access and manipulate a database wouldn't be so dificult..
I guess i was wrong..

Similar Messages

Applets, Policy Files, jar signing, JNI, etc

Hi,
I need an Applet to be able to connect to sockets and use some JNI. Hence, as far as I can tell, I need to use a Policy File. In a standalone application, I have written my policy file tried it out by switching on the security manager. However I am not sure how I do this with an applet.
I have read many examples of Jar signing, yet every example uses appletviewer and the -J-Djava.security.policy to show the security policy in action.
However I want this to work through a normal browser, so how do I achieve this?
Do I specify a URL to the java.security.file in the embed/object/applet tags in the HTML?
Do I put the policy file in the jar and reference it via the Manifest?
Any ideas much appreciated,
John B

The standard AccessControlException:
java.security.AccessControlException: access denied (java.lang.RuntimePermission getClassLoader)
at java.security.AccessControlContext.checkPermission(AccessControlContext.java:270)
at java.security.AccessController.checkPermission(AccessController.java:401)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:542)
at java.lang.ClassLoader.getParent(ClassLoader.java:701)
Or something like that.
That's what I'm trying to solve, I wish to use the Java Security Policy system to allow my applet access to various resources, such as writing files. Now I've seen that signing an applet will give it full access (in my view, this is rather insecure, but anyway), however following the steps to sign an applet two or three times has still presented me with the same problem. The signing is ignored, and the exception is thrown.
Applet signing aside, I fail to see any documentation stating how the policy file is used by the VM when running on a browser. I assumed it might be an entry in the Jar's manifest file, but again, I can find no documentation.
It's all very annoying, and Sun have done quite a bad job at documenting this. For example, their example talkes about -D-Jjava.security.policy=.... being passed to appletviewer. Who on earth uses appletviewer! If policies only work with that, then they are useless. I want them to work with whatever browser the applet is being run within.
Surely this isn't too much to ask? :)

Jars signed with revoked certificate

Hello,
I have a situation here where i have jars and wars which were signed using jarsigner. The certificate used to sign the jars is now revoked.
When java runtime loads these jars, it does not throw any errors/exceptions. Is it the right behavior ?
Is there any way by which I can configure java runtime to contact the CRL and to throw an error while the jar is loaded. The certificate has information
about CRL distribution point and also has authorityinfo access details. I tried configuring OCSP in java.security file. But still no luck.
Any information on this will be helpful.
Thanks in advance

Hello EJP,
Thanks for replying.
Yes the certificate was valid when the jar was signed. Please note that, there was no timestamp put in the signature.
So now after the certificate has been revoked, if Java runtime tries to load that jar, isn't it the responsibility of Java runtime to make use of the CRL/OCSP information
of the public key certificate (present in the jar put by the jarsigner when signing) and validate it for revocation ? (Also, in this scenario, what happens if OCSP is enabled in java.security ?) -OR--- Is it the responsibility of the code that makes use of the jar, to verify whether the certificate used for jar signing has been revoked or not ?
PS:- I have enabled the security settings in java control panel for certificate revocation checking.
Please let me know if I am wrong or if I am missing something.
Also i noticed something with jarsigner. In a signed jar, If i delete a few files and then verify its signature using jarsigner, "jar verified" is returned as result. Isn't the jar tampered when I delete a few files from it ? and hence the Hash of its data changes ? and hence verification should fail ?
One more question, in case of signed applets, if the certificate is revoked, as soon as the browser tries loading the applet, it throws an error saying certificate that was used for signing has been revoked. (provided browser settings and java control panel settings are all properly set). Is this check initiated by the browser OR Java runtime ?
Thanks a lot

Options - Text Editor - C/C++ missing intellisense entry. Intellisense not working

Options -> Text Editor -> C/C++ missing intellisense entry. Intellisense not working. Solutions to turn options for the editor off and on are not working. The intellisense entry is present for other languages,
such as C#, but not C/C++.
By not working, I mean the intellisense right click menu items are grayed out, and intellisense files are not produced.

Hi JerroldBrody,
Thank you for posting in MSDN forum.
>>I mean the intellisense right click menu items are grayed out, and intellisense files are not produced.
Based on your issue, could you please share me a screen shot about the intellisense right click menu items are grayed out?
Generally, I know that it is default that we can enable the intellisense for C/C++ by going to the TOOLS->Options -> Text Editor -> C/C++ ->Advanced-> IntelliSense like the following screen shot.
So please try to check if you set Disable Intellisense property as False in the VS IDE.
Best Regards,
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Missing registry entries for burning CDs

I used iTunes to burn soe playlists. This worked well. However, I also installed Nero Exprss after that. After this when I brought up iTunes it gave the message "MIssing registry entries - cannot import or burn CDs or DVDs - reinstall iTunes" Though I was still able to import CDs after that, I cannot burn CDs. The error does not go away even after re-installing iTunes several times (either usiing an Update or after unistalling and doing a fresh install).
How can I fix this problem ?

I'd start with the following document, with one modification. At step 12 after typing GEARAspiWDM press the Enter/Return key once prior to clicking OK. (Pressing Return adds a carriage return in the field and is important.)
iTunes for Windows: "Registry settings" warning when opening iTunes

Missing some entries in trasaction OKB9 after upgrade to ECC 6.0

We're missing some entries in transaction OKB9 after the upgrade to ECC 6.0. Pariculary, a significant number of records in table TKA3C were not copied over to ECC 6.0.
Have anyone experience this same problem as well. We're at the early stage of unit testing a we're worried that there maybe some other config tables that were not properly copied.
Any help would be appreciated.
Thanks,
Apollo

Hi friends, i fixed this issue.Its a configuration problem.In table T882 they didnt maintaine fisical variant filed for particular compony code.Once this is maintained the problem got solved

Missing calendar entries when syncing

Using windows xp, ms outlook 2007 and iTunes 1.1.3, I am missing calendar entries on my computer after syncing. The calendar entries are shown on the iPhone, but many do not make it onto Outlook on my computer. The sync seems to push onto the iPhone one-way, without updating the computer. Anyone else have this issue? Any solutions?

Update to original post:
Phone is taking roughly 45 minutes to sync, which is awful.
Calendar items are not syncing with Outlook.
Contacts are multiplying with every sync, numbering into the thousands.
My sense is Apple is overwhelmed with these issues. I did the iTunes upgrade yesterday and no improvement.

Webservices.jar is missing from WL_HOME/server/lib in WLS 12c

webservices.jar is missing from WL_HOME/server/lib in WLS 12c. Was it replaced by a different jar or is this a new implementation i'm unfamiliar with? It does appear in all versions up to 11g.
Without it i won't be able to migrate my application to 12c from the older versions...

hi,
In the 12.1.1 release, the 8.1 WebLogic Web services run time has been removed. So you will no longer see the webservices.jar file
http://docs.oracle.com/cd/E24329_01/web.1211/e24497/upgrade_ws.htm#BGBIDHIJ
Regards,
Sunil P

Need some advices on jar signing

Hi, our's company project will have an app server and some desktop apps.
App server - tomcat, desktop - are just some application.jar.
The question is how server may know if the data is from our application.jar or from any thirdparties? May jar signing solve this or there is another way.
P.S. There will be no Java Web Start
Thanks in advance.

1) If you can mount those disks on your database server then YES you can store the RMAN backups of those. You must NFS Mount the disks on your DB server so that RMAN can see them put the bakcups on them. Or you can directly write to the tapes.
2) No, Flash recovery area is only one parameter pointing to one mounted space and you can't spread it over multiple volumes. What is the size of your database?
Daljit Singh

Missing configuration entry for data - index relationship

IN ST04 -> configuration -> Data Class
all data classes are in yellow I'm trying to activate them and getting the following error
"Missing configuration entry for data - index relationship"
This is the result of a system copy
Thanks
Kkhaldoun

Hi All,
Just an update, I was able to get around my problems by patching the 2004s media from sp6 to sp8, uninstalling my scs, and database and re-installing from the patched media.

Missing registry entry with v7u10 - Windows - Firefox

Is Oracle aware that Firefox isn't recognising Java for some users after updating to v7u10 due to a missing registry entry?
Full details are at http://forums.mozillazine.org/viewtopic.php?p=12543707#p12543707
Thanks

Sigh. No, I'm looking for an answer.
I really don't want to have to figure a bug reporting system unless I absolutely have to.
Alternatively, a solution would be nice.

PKG-Building: WARNING: missing directory entry for /tmp

Hi,
After I ran the 'pkgmk -o -r / -d /tmp/pkg -f my.prototype' I got followings:
## Building pkgmap from package prototype file.
## Processing pkginfo file.
WARNING: missing directory entry for </tmp>
WARNING: missing directory entry for </tmp/test>
## Attempting to volumize 4 entries in pkgmap.
part 1 -- 167 blocks, 16 entries
## Packaging one part.
/tmp/pkg/WChen/pkgmap
/tmp/pkg/WChen/pkginfo
/tmp/pkg/WChen/root/tmp/test/test1.txt
/tmp/pkg/WChen/root/tmp/test/test2.txt
/tmp/pkg/WChen/root/tmp/test/test3.txt
## Validating control scripts.
## Packaging complete.
What does here "WARNING: missing directory entry for </tmp>" mean? Though this is not critical, I want to know if it's possible to get rid of it.

you want add this into pacmans path
Server = ftp://ftp.archlinux.org/tur/hapy
then
pacman -S gnomad2
its so much easier
but if your current like if you ran pacman -Suy after oct 1 i belive
then it probably wont work
mine did till the new upgrades
ive not been able to build it from source like your doing ive tried many times
i read some where in the read me files bout jsut adding modprobe njbfs then mount it like
a mass storage device im gonna try looking into that today
i also posted ? to the forum on this

JApplet jar signing

Hi,
My requirement is to bring a set of files from the server to the client thru JApplet..
(Japplet,jdk1.3,weblogic,jre1.3) is the environment.
I know that the jar file has to signed etc.. but is there any way by which i can accomplish this
without jar signing..
If it is not possible, is there any way to test the jar signing (any trial version etc).I just want to
test it before buying the Verisign etc..
Could any one help me on this...
Thanks

Can we customize sign_webutil.bat to do this?Yes, you can. Only be careful to webutil password

PJC jar sign

hi,
i want to use some jar file as :
http://forms.pjc.bean.over-blog.com/article-1830062.html
but need to sign and i don't know how to sign .
plz help for sign .

Thanks for the response. I looked over getting JAR signing to work, but this applet is being hosted on the local machine and that process required an online URL. Knowing that my command line argument was wrong helped a lot though, I eventually loaded up the policytool program and got the syntax I needed for the policy file.
grant codeBase "file:/C:/WINDOWS/java/classes/Client_2.0/classes/Client/*" {
permission java.security.AllPermission;
};

Jar signing returns "jar is unsigned"

Hi all, i am been trying to sign a jar, because i nedd an applet to access and update a database.
What i've done was:
keytool -genkey -alias MYALIAS -keypass mypass -keystore MYKEYSTORE -storepass mykeystorepass
and then
jarsigner -keystore MYKEYSTORE -storepass mykeystorepass -keypass mypass -signedjar SGID.jar GID.jar MYALIAS
The result of >jarsigner -verify SGID.jar
is
jar is unsigned. (signatures missing or not parsable)
Why is this returning that the jar is unsigned? I think 've created this correctly, if you can find any error or probable cause, please tell me.
Thanks.
Edited by: nfteodoro on Nov 27, 2009 3:01 AM
Edited by: nfteodoro on Nov 27, 2009 3:03 AM

I just tried again, here my result, so you can see if something is wrong or missing:
1 - C:\Sun\SDK\jdk\bin>keytool -genkey -v -keyalg dsa -alias MYALIAS -keypass mypass -keystore MYKEYSTORE -storepass mykeystorepass
What is your first and last name?
[Unknown]: MYNAME
What is the name of your organizational unit?
[Unknown]: SCCM
What is the name of your organization?
[Unknown]: MYCOMPANY
What is the name of your City or Locality?
[Unknown]: LISBON
What is the name of your State or Province?
[Unknown]: LISBON
What is the two-letter country code for this unit?
[Unknown]: LX
Is CN=NOESIS, OU=SCCM, O=NOESIS, L=LISBON, ST=LISBON, C=LX correct?
[no]: YES
Generating 1.024 bit DSA key pair and self-signed certificate (SHA1withDSA) with
a validity of 90 days
for: CN=NOESIS, OU=SCCM, O=NOESIS, L=LISBON, ST=LISBON, C=LX
[Storing MYKEYSTORE]
2 - C:\Sun\SDK\jdk\bin>jarsigner -keystore MYKEYSTORE -storepass mykeystorepass -key pass mypass GID.jar MYALIAS
Warning:
The signer certificate will expire within six months.
3 - C:\Sun\SDK\jdk\bin>jarsigner -verify GID.jar
jar is unsigned. (signatures missing or not parsable)
So, as you can see, this really is not working for me :s
I've tried different approaches, an none worked, why can't i sign a .jar file??..this is really weird, i thought creating an applet to access and manipulate a database wouldn't be so dificult..
I guess i was wrong..

Jar Signing // Missing Digest entries

Similar Messages

Maybe you are looking for