java


Signed jar file recognized in java 1.7.0_76 but not java 1.7.0_75


I signed a jar file using the signer provided with jdk 1.7.0_71. This also worked previously until we updated from
X.509, CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa
to
X.509, CN=GlobalSign CodeSigning CA - SHA256 - G3, O=GlobalSign nv-sa
Now we have the behaviour that the jar file is recognized as signed at 1.7.0_76 but not 1.7.0_75. The only difference I see is the generation.
Although I have the strong feeling that some security update similar to the topic described in Signing JAR files in the explorer showing "unsigned" when verifying them causes the problem I cannot find any proof.
Did somebody already stumble across a similar or the same problem and, more importantly, found a solution?
The problem was not the new certificate. It actually depended on two other factors.
The Java version from which the jarsigner was taken. If you take the jarsigner from some Java 8 JDK it can happen that it does not work any more with every Java 7 JRE as SHA256 is used at "Timestamp digest algorithm".
The URL used for timestamping. If you are using one which provides higher security (let's say SHA256) it does also not work any more with every Java 7 JRE as again SHA256 is used, now at "Timestamp signature algorithm".

Related Links

Refactoring a long servlet conditional
Getting NoClassDefFoundError when trying to run a maintenance task on a servlet
Producer/consumer pattern in Java
Both XPath/getChildElements failed to get XML child in XOM
Hibernate removes child objects after session.update(parent)
Trouble Installing Selenium RC Java Client Driver
Java: How do you enforce a class type parameter to be the same as generic type specified in a generic method?
Springframework UserDetailsService error
How to properly handle client “Connection: close” request on HTTP file server?
Tomcat Java Servlet - Initialize Class on Application Startup
How do I send data between two computers over the internet
Apache Axis fails after change in WSDL
do searching in a very big ARPA file in a very short time in java
Is it possible to manage a project by both Ant and Maven?
Object oriented design with Java - casting and a derived class with more member variables than the base
.classpath file in the eclipse question

Categories

HOME
openlayers
variables
asp.net-core
vbscript
blogger
ngrx
google-docs
dxl
installshield
remote-access
messages
circuit
django-admin
windows-7-x64
google-static-maps
google-pagespeed
visjs
cx-freeze
autoconf
arabic
captiveportal
typo3-6.2.x
elasticsearch-ruby
jspm
objectanimator
sql-server-2012-express
directx-10
twilio-api
gtrendsr
lxd
subset-sum
vxworks
retina-display
event-driven
withings
android-browser
service-discovery
unspecified
azure-ml
eclipse-scout
gulp-sourcemaps
grid.mvc
texmaker
node-gyp
heightmap
sencha-touch-2.3
angular2-meteor
scrollable
fancybox-2
namecoin
flow-control
bonobo
skype4py
ipconfig
javax.sound.midi
rtbkit
lemon
service-accounts
appfabric-cache
offloading
c3
nstableviewcell
xojo
android-2.2-froyo
app42
gnu-smalltalk
tidy
spring-io
seed
orchardcms-1.7
robotics-studio
kyotocabinet
mhtml
dice
runas
dsn
windows-phone-7.1.1
netbeans-6.9
dotnethighcharts
ohm
custom-backend
nsdatecomponents
doh
xtype
appender
ecl
winbugs14
mongomapper
floating
sortable-tables
rescale
fixed-width
iweb
exchange-server-2003
ti-dsp
noscript
port-number
spec#
ubuntu-9.04
msdev

Resources

Mobile Apps Dev
Database Users
javascript
java
csharp
php
android
MS Developer
developer works
python
ios
c
html
jquery
RDBMS discuss
Cloud Virtualization
Database Dev&Adm
javascript
java
csharp
php
python
android
jquery
ruby
ios
html
Mobile App
Mobile App
Mobile App