[mojo-dev] [jira] (MWEBSTART-211) Building with JDK 1.7 causes "invalid SHA1 signature" error

Tue, 04 Jun 2013 07:33:58 -0700

Issue Type: Bug Bug
Affects Versions: 1.0-beta-3
Assignee: Unassigned
Components: sign
Created: 04/Jun/13 9:31 AM
Description:

When using JDK 1.7 to build the project, the resulting signed jars are rejected by the client JRE (build 1.7.0_21-b11) with the following error:

java.io.IOException: invalid SHA1 signature file digest for javax/servlet/ServletRequestWrapper.class
	at com.sun.deploy.cache.CacheEntry$10.run(Unknown Source)
	at java.security.AccessController.doPrivileged(Native Method)
	at com.sun.deploy.cache.CacheEntry.writeFileToDisk(Unknown Source)
	at com.sun.deploy.cache.CacheEntry.writeFileToDisk(Unknown Source)
	at com.sun.deploy.cache.Cache.downloadResourceToTempFile(Unknown Source)
	at com.sun.deploy.cache.Cache.downloadResourceToCache(Unknown Source)
	at com.sun.deploy.net.DownloadEngine.actionDownload(Unknown Source)
	at com.sun.deploy.net.DownloadEngine.downloadResource(Unknown Source)
	at com.sun.deploy.cache.ResourceProviderImpl.getResource(Unknown Source)
	at com.sun.deploy.cache.ResourceProviderImpl.getResource(Unknown Source)
	at com.sun.javaws.LaunchDownload$DownloadTask.call(Unknown Source)
	at java.util.concurrent.FutureTask$Sync.innerRun(Unknown Source)
	at java.util.concurrent.FutureTask.run(Unknown Source)
	at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
	at java.lang.Thread.run(Unknown Source)



When building using JDK 1.6 everything works fine.



According to MJARSIGNER-21, the solution would be to set the "digestalg" parameter to "SHA-1" when JDK 1.7 is used, using the "arguments" property of JarSigner



Unfortunatly, this attribute is not accessible in Webstart Plugin.
Project: Maven 2.x Webstart Plugin
Priority: Major Major
Reporter: Julien Béti
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
--------------------------------------------------------------------- To unsubscribe from this list, please visit: http://xircles.codehaus.org/manage_email

Reply via email to