Signed jar file recognized in java 1.7.0_76 but not java 1.7.0_75
I signed a jar file using the signer provided with jdk 1.7.0_71. This also worked previously until we updated from X.509, CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa to X.509, CN=GlobalSign CodeSigning CA - SHA256 - G3, O=GlobalSign nv-sa Now we have the behaviour that the jar file is recognized as signed at 1.7.0_76 but not 1.7.0_75. The only difference I see is the generation. Although I have the strong feeling that some security update similar to the topic described in Signing JAR files in the explorer showing "unsigned" when verifying them causes the problem I cannot find any proof. Did somebody already stumble across a similar or the same problem and, more importantly, found a solution?
The problem was not the new certificate. It actually depended on two other factors. The Java version from which the jarsigner was taken. If you take the jarsigner from some Java 8 JDK it can happen that it does not work any more with every Java 7 JRE as SHA256 is used at "Timestamp digest algorithm". The URL used for timestamping. If you are using one which provides higher security (let's say SHA256) it does also not work any more with every Java 7 JRE as again SHA256 is used, now at "Timestamp signature algorithm".
java.lang.SecurityException: invalid SHA1 signature file digest for org/bouncycastle/tsp/TimeStampTokenInfo.class
How to get batch/bulk messages from azure queue without using azure sdk?
Repeated application of parameters from a stream to a fluent builder method
Struts2 equivalent - actionError.get().hasNext()
Creating a Scrollable VBox in JavaFx
Make arraylist parcelable in my code?
Temporary files stays in linux after an attempt to delete
How to fix google play services lib r29 problems
Import Eclipse project workspace to Apache tomcat folder
Minimize primefaces dialog from beacking bean
What is the difference between updating the value of a Linkedlist within a method in these two ways?
Wicket application in Jboss: session expires too quickly
Include spark avoiding huge dependencies
Check whether a Java thread is yielding
Find out if the user in specific region using GPS data
Why does a small JPopupMenu cause visual artifacts whereas a larger one doesn't?