Signed jar file recognized in java 1.7.0_76 but not java 1.7.0_75
I signed a jar file using the signer provided with jdk 1.7.0_71. This also worked previously until we updated from X.509, CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa to X.509, CN=GlobalSign CodeSigning CA - SHA256 - G3, O=GlobalSign nv-sa Now we have the behaviour that the jar file is recognized as signed at 1.7.0_76 but not 1.7.0_75. The only difference I see is the generation. Although I have the strong feeling that some security update similar to the topic described in Signing JAR files in the explorer showing "unsigned" when verifying them causes the problem I cannot find any proof. Did somebody already stumble across a similar or the same problem and, more importantly, found a solution?
The problem was not the new certificate. It actually depended on two other factors. The Java version from which the jarsigner was taken. If you take the jarsigner from some Java 8 JDK it can happen that it does not work any more with every Java 7 JRE as SHA256 is used at "Timestamp digest algorithm". The URL used for timestamping. If you are using one which provides higher security (let's say SHA256) it does also not work any more with every Java 7 JRE as again SHA256 is used, now at "Timestamp signature algorithm".
Refactoring a long servlet conditional
Getting NoClassDefFoundError when trying to run a maintenance task on a servlet
Producer/consumer pattern in Java
Both XPath/getChildElements failed to get XML child in XOM
Hibernate removes child objects after session.update(parent)
Trouble Installing Selenium RC Java Client Driver
Java: How do you enforce a class type parameter to be the same as generic type specified in a generic method?
Springframework UserDetailsService error
How to properly handle client “Connection: close” request on HTTP file server?
Tomcat Java Servlet - Initialize Class on Application Startup
How do I send data between two computers over the internet
Apache Axis fails after change in WSDL
do searching in a very big ARPA file in a very short time in java
Is it possible to manage a project by both Ant and Maven?
Object oriented design with Java - casting and a derived class with more member variables than the base
.classpath file in the eclipse question