This discussion is archived
4 Replies Latest reply: Feb 9, 2009 2:48 AM by 843844 RSS

java.lang.SecurityException: invalid SHA1 signature file digest for com/cry

843844 Newbie
Currently Being Moderated
While running AVK I've got following error reported on 3d party code we are using. Is there anything that I can do to resolve this issue?
Thank you in advance,
Irena

     Error Name : com.sun.enterprise.tools.verifier.tests.web.WebArchiveClassesLoadable
     Error Description : java.lang.SecurityException: invalid SHA1 signature file digest for com/crystaldecisions/MetafileRenderer/DeviceContext$GDIState.class

     at sun.security.util.SignatureFileVerifier.verifySection(SignatureFileVerifier.java:390)

     at sun.security.util.SignatureFileVerifier.process0(SignatureFileVerifier.java:241)

     at sun.security.util.SignatureFileVerifier.process(SignatureFileVerifier.java:191)

     at java.util.jar.JarVerifier.processEntry(JarVerifier.java:235)

     at java.util.jar.JarVerifier.update(JarVerifier.java:190)

     at java.util.jar.JarFile.initializeVerifier(JarFile.java:304)

     at java.util.jar.JarFile.getInputStream(JarFile.java:366)

     at sun.net.www.protocol.jar.JarURLConnection.getInputStream(JarURLConnection.java:119)

     at java.net.URL.openStream(URL.java:913)

     at java.lang.ClassLoader.getResourceAsStream(ClassLoader.java:997)

     at com.sun.enterprise.tools.verifier.apiscan.classfile.BCELClassFileLoader.load(BCELClassFileLoader.java:69)

     at com.sun.enterprise.tools.verifier.apiscan.classfile.ClosureCompilerImpl.buildClosure(ClosureCompilerImpl.java:170)

     at com.sun.enterprise.tools.verifier.apiscan.classfile.ClosureCompilerImpl.buildClosure(ClosureCompilerImpl.java:176)

     at com.sun.enterprise.tools.verifier.apiscan.classfile.ClosureCompilerImpl.buildClosure(ClosureCompilerImpl.java:176)

     at com.sun.enterprise.tools.verifier.apiscan.classfile.ClosureCompilerImpl.buildClosure(ClosureCompilerImpl.java:176)

     at com.sun.enterprise.tools.verifier.apiscan.classfile.ClosureCompilerImpl.buildClosure(ClosureCompilerImpl.java:133)

     at com.sun.enterprise.tools.verifier.tests.web.WebArchiveClassesLoadable.check(WebArchiveClassesLoadable.java:53)

     at com.sun.enterprise.tools.verifier.tests.web.WebTest.check(WebTest.java:46)

     at com.sun.enterprise.tools.verifier.CheckMgr.check(CheckMgr.java:76)

     at com.sun.enterprise.tools.verifier.web.WebCheckMgrImpl.check(WebCheckMgrImpl.java:32)

     at com.sun.enterprise.tools.verifier.BaseVerifier.verify(BaseVerifier.java:86)

     at com.sun.enterprise.tools.verifier.web.WebVerifier.verify(WebVerifier.java:43)

     at com.sun.enterprise.tools.verifier.VerificationHandler.runVerifier(VerificationHandler.java:136)

     at com.sun.enterprise.tools.verifier.VerificationHandler.verifyArchive(VerificationHandler.java:82)

     at com.sun.enterprise.tools.verifier.Verifier.verify(Verifier.java:75)

     at com.sun.enterprise.tools.verifier.Verifier.main(Verifier.java:53)
  • 1. Re: java.lang.SecurityException: invalid SHA1 signature file digest for com
    843844 Newbie
    Currently Being Moderated
    Hi,

    Where is the JAR file containing com/crystaldecisions/MetafileRenderer/DeviceContext$GDIState.class located?
    Try running the verifier by placing it in WEB-INF/lib directory of your application.

    Thanks,
    Bhavani.
  • 2. Re: java.lang.SecurityException: invalid SHA1 signature file digest for com
    843844 Newbie
    Currently Being Moderated
    It is in WEB-INF/lib.
    We have so many of them, that command line activation under Windows is failing. I tried to combine the classes in one jumbo jar but something is not working as you can see
  • 3. Re: java.lang.SecurityException: invalid SHA1 signature file digest for com
    843844 Newbie
    Currently Being Moderated
    could you solve the problem? while I'm connecting to sql server , I get the same error. in fact, i can connect to server through eclipse ide but when i export my application into a jar and try connecting to server through the jar, this problem occurs.
    I thought, you can give me a idea. I don't know where I should start. please, help me..



    Exception in thread "main" java.lang.SecurityException: invalid SHA1 signature f
    ile digest for com/microsoft/sqlserver/jdbc/SQLServerException.class
    at sun.security.util.SignatureFileVerifier.verifySection(Unknown Source)

    at sun.security.util.SignatureFileVerifier.processImpl(Unknown Source)
    at sun.security.util.SignatureFileVerifier.process(Unknown Source)
    at java.util.jar.JarVerifier.processEntry(Unknown Source)
    at java.util.jar.JarVerifier.update(Unknown Source)
    at java.util.jar.JarFile.initializeVerifier(Unknown Source)
    at java.util.jar.JarFile.getInputStream(Unknown Source)
    at sun.misc.URLClassPath$JarLoader$2.getInputStream(Unknown Source)
    at sun.misc.Resource.cachedInputStream(Unknown Source)
    at sun.misc.Resource.getByteBuffer(Unknown Source)
    at java.net.URLClassLoader.defineClass(Unknown Source)
    at java.net.URLClassLoader.access$000(Unknown Source)
    at java.net.URLClassLoader$1.run(Unknown Source)
    at java.security.AccessController.doPrivileged(Native Method)
    at java.net.URLClassLoader.findClass(Unknown Source)
    at java.lang.ClassLoader.loadClass(Unknown Source)
    at sun.misc.Launcher$AppClassLoader.loadClass(Unknown Source)
    at java.lang.ClassLoader.loadClass(Unknown Source)
    at java.lang.ClassLoader.loadClassInternal(Unknown Source)
  • 4. Re: java.lang.SecurityException: invalid SHA1 signature file digest for com
    843844 Newbie
    Currently Being Moderated
    Mircosoft had signed the jar file thru their own tools. So when you try to use the jar file directly or signing by your own tool and using on your JNLP will give this problem.

    To solve this problem steps to be followed.

    1. Extract the sqljdbc.jar or sqljdbc4.jar file
    2. Goto META-INF Folder
    3. Open MANIFEST.MF and delete all the lines other than first line and save it
    4. Delete other files which exist in the same folder
    5. Finally once again make a new jar file including com and META-INF folder as sqljdbc.jar or sqljdbc4.jar

    Thanks,
    Suresh
    [http://sureshdevi.co.in|http://sureshdevi.co.in]