Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8184993

Jar file verification failing with SecurityException: digest missing xxx

XMLWordPrintable

        Behavioural change in 8u141 is causing some jar files to fail verification.

        Example stacktrace :

        com.sun.deploy.net.JARSigningException: Could not verify signing in resource: (http://localhost:8080/webstart/lib/l2fprod-0.0.1.jar, 55873)
        at com.sun.deploy.security.JarVerifier.authenticateJarEntry(Unknown Source)
        at com.sun.deploy.security.EnhancedJarVerifier.validate(Unknown Source)
        at com.sun.deploy.cache.CacheEntry.processJar(Unknown Source)
        at com.sun.deploy.cache.CacheEntry.access$2700(Unknown Source)
        at com.sun.deploy.cache.CacheEntry$7.run(Unknown Source)
        at java.security.AccessController.doPrivileged(Native Method)
        at com.sun.deploy.cache.CacheEntry.writeFileToDisk(Unknown Source)
        at com.sun.deploy.cache.CacheEntry.writeFileToDisk(Unknown Source)
        at com.sun.deploy.cache.Cache.downloadResourceToTempFile(Unknown Source)
        ...

        ================================
        WrappedException:
        ================================
        java.lang.SecurityException: digest missing for com/l2fprod/common
        at sun.security.util.ManifestEntryVerifier.verify(Unknown Source)
        at java.util.jar.JarVerifier.processEntry(Unknown Source)
        at java.util.jar.JarVerifier.update(Unknown Source)
        at java.util.jar.JarVerifier$VerifierStream.<init>(Unknown Source)
        at java.util.jar.JarFile.getInputStream(Unknown Source)
        at com.sun.deploy.security.JarVerifier.authenticateJarEntry(Unknown Source)
        at com.sun.deploy.security.EnhancedJarVerifier.validate(Unknown Source)
        at com.sun.deploy.cache.CacheEntry.processJar(Unknown Source)
        at com.sun.deploy.cache.CacheEntry.access$2700(Unknown Source)
        at com.sun.deploy.cache.CacheEntry$7.run(Unknown Source)
        at java.security.AccessController.doPrivileged(Native Method)
        at com.sun.deploy.cache.CacheEntry.writeFileToDisk(Unknown Source)
        at com.sun.deploy.cache.CacheEntry.writeFileToDisk(Unknown Source)
        at com.sun.deploy.cache.Cache.downloadResourceToTempFile(Unknown Source)
        ...

          1.
          		 Release Note: java.util.zip.ZipFile.getEntry() now always returns the ZipEntry instance with a '/' ended entry name for directory entry Sub-task Closed Sean Mullan  

              igerasim Ivan Gerasimov
              coffeys Sean Coffey
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: