com.sun.deploy.net.JARSigningException: Found unsigned entry in resource: http://webstart.example.com/test.jar.9b20

JDK Bug System | Webbug Group | 2 years ago
  1. 0

    FULL PRODUCT VERSION : "Consumer" JRE java version "1.7.0_60" Java(TM) SE Runtime Environment (build 1.7.0_60-b19) Java HotSpot(TM) Client VM (build 24.60-b09, mixed mode, sharing) "Producer" JDK java version "1.9.0-ea" Java(TM) SE Runtime Environment (build 1.9.0-ea-b20) Java HotSpot(TM) Client VM (build 1.9.0-ea-b20, mixed mode, sharing) ADDITIONAL OS VERSION INFORMATION : Microsoft Windows [Version 6.1.7601] A DESCRIPTION OF THE PROBLEM : According to the latest security recommendations from Oracle, I have been trying to timestamp my jar files at signature time. If I sign with JDK 9, JRE 7 complains "Found unsigned entry in resource". Complete compatibility matrix as far as I can see: Sign | Run | Works? With | With | Works? 7 7 Y 8 7 Y 9 7 N 7 8 Y 8 8 Y 9 8 N 7 9 Y 8 9 Y 9 9 Y It looks like this is a bug in the signature process rather than the verification process, but it may be a problem with the verification instead? REGRESSION. Last worked in version 8u20 ADDITIONAL REGRESSION INFORMATION: "Consumer" JRE java version "1.7.0_60" Java(TM) SE Runtime Environment (build 1.7.0_60-b19) Java HotSpot(TM) Client VM (build 24.60-b09, mixed mode, sharing) "Producer" JDK java version "1.9.0-ea" Java(TM) SE Runtime Environment (build 1.9.0-ea-b20) Java HotSpot(TM) Client VM (build 1.9.0-ea-b20, mixed mode, sharing) STEPS TO FOLLOW TO REPRODUCE THE PROBLEM : 1. Create a small webstart application 2. Obtain a code signature certificate 3. Sign with JDK 9 C:\>"C:\Program Files (x86)\Java\jdk1.9.0\bin\jarsigner.exe" -storepass password -tsa https://timestamp.geotrust.com example.jar.9b20 test 4. Launch the webstart application from a machine without JDK 9 installed EXPECTED VERSUS ACTUAL BEHAVIOR : EXPECTED - The application should launch and run normally ACTUAL - The application doesn't run, claiming that the JAR file contains unsigned entries ERROR MESSAGES/STACK TRACES THAT OCCUR : com.sun.deploy.net.JARSigningException: Found unsigned entry in resource: http://webstart.example.com/test.jar.9b20 at com.sun.javaws.security.SigningInfo.getCommonCodeSignersForJar(Unknown Source) at com.sun.javaws.security.SigningInfo.check(Unknown Source) at com.sun.javaws.security.JNLPSignedResourcesHelper.checkSignedResourcesHelper(Unknown Source) at com.sun.javaws.security.JNLPSignedResourcesHelper.checkSignedResources(Unknown Source) at com.sun.javaws.Launcher.prepareResources(Unknown Source) at com.sun.javaws.Launcher.prepareAllResources(Unknown Source) at com.sun.javaws.Launcher.prepareToLaunch(Unknown Source) at com.sun.javaws.Launcher.prepareToLaunch(Unknown Source) at com.sun.javaws.Launcher.launch(Unknown Source) at com.sun.javaws.Main.launchApp(Unknown Source) at com.sun.javaws.Main.continueInSecureThread(Unknown Source) at com.sun.javaws.Main.access$000(Unknown Source) at com.sun.javaws.Main$1.run(Unknown Source) at java.lang.Thread.run(Unknown Source) REPRODUCIBILITY : This bug can be reproduced always. CUSTOMER SUBMITTED WORKAROUND : Don't use timestamping or timestamp with JDK 8 or earlier

    JDK Bug System | 2 years ago | Webbug Group
    com.sun.deploy.net.JARSigningException: Found unsigned entry in resource: http://webstart.example.com/test.jar.9b20
  2. 0

    Unsigned Jar Error when the Jar is signed

    Stack Overflow | 4 years ago | ErrorNotFoundException
    com.sun.deploy.net.JARSigningException: Found unsigned entry in resource: http://Stanley/A-Skul.jar
  3. 0

    Java web start error after update Java 7u17 to Java 8u25 SecurityException

    Stack Overflow | 2 years ago | rez
    com.sun.deploy.net.JARSigningException: Found unsigned entry in resource:(http://xxx.xxx.xxx.xxx/app/app.jar, 0.2.2.01)
  4. Speed up your debug routine!

    Automated exception search integrated into your IDE

  5. 0

    Found unsigned entry in resource

    Stack Overflow | 3 years ago | Marc Rasmussen
    com.sun.deploy.net.JARSigningException: Found unsigned entry in resource: http://*****:****/tcm2012.jar
  6. 0

    Unable to get java web start working

    Stack Overflow | 2 years ago | user3731979
    com.sun.deploy.net.JARSigningException: Found unsigned entry in resource: http://www.pirategame.net/webstart/slick.jar

    2 unregistered visitors
    Not finding the right solution?
    Take a tour to get the most out of Samebug.

    Tired of useless tips?

    Automated exception search integrated into your IDE

    Root Cause Analysis

    1. com.sun.deploy.net.JARSigningException

      Found unsigned entry in resource: http://webstart.example.com/test.jar.9b20

      at com.sun.javaws.security.SigningInfo.getCommonCodeSignersForJar()
    2. com.sun.javaws
      Main$1.run
      1. com.sun.javaws.security.SigningInfo.getCommonCodeSignersForJar(Unknown Source)
      2. com.sun.javaws.security.SigningInfo.check(Unknown Source)
      3. com.sun.javaws.security.JNLPSignedResourcesHelper.checkSignedResourcesHelper(Unknown Source)
      4. com.sun.javaws.security.JNLPSignedResourcesHelper.checkSignedResources(Unknown Source)
      5. com.sun.javaws.Launcher.prepareResources(Unknown Source)
      6. com.sun.javaws.Launcher.prepareAllResources(Unknown Source)
      7. com.sun.javaws.Launcher.prepareToLaunch(Unknown Source)
      8. com.sun.javaws.Launcher.prepareToLaunch(Unknown Source)
      9. com.sun.javaws.Launcher.launch(Unknown Source)
      10. com.sun.javaws.Main.launchApp(Unknown Source)
      11. com.sun.javaws.Main.continueInSecureThread(Unknown Source)
      12. com.sun.javaws.Main.access$000(Unknown Source)
      13. com.sun.javaws.Main$1.run(Unknown Source)
      13 frames
    3. Java RT
      Thread.run
      1. java.lang.Thread.run(Unknown Source)
      1 frame