IBM Support

PM60915: EAREXPANDER BREAKS THE SIGNATURE OF SIGNED JAR FILES

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • EAR expansion (EARExpander) processing in WebSphere
    Application Server V8.0 breaks the signature of signed jar
    files.
    
    1. Expand the EAR file using EARExpander.
    2. Locate the signed jar for signature verification.
    3. Verify the jar using the java command: "jarsigner -verify
    -verbose <jarFileName>"
    
    Result: Jar is NOT verified and you get the following error
    message:
    
    jarsigner: java.lang.SecurityException: Invalid signature file
    digest for Manifest main attributes.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  All users of IBM WebSphere Application      *
    *                  Server V8.0 who have applications that      *
    *                  contain signed archive files.               *
    ****************************************************************
    * PROBLEM DESCRIPTION: After expanding the EAR, the            *
    *                      signature of a signed archive file      *
    *                      contained within the EAR is no          *
    *                      longer valid.                           *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    The problem occurs because MANIFEST.MF files are rewritten
    unnecessarily.
    

Problem conclusion

  • The code is changed to rewrite archive files only when
    necessary, and to use the original MANIFEST.MF when doing so.
    
    The fix for this APAR is currently targeted for inclusion in
    fix packs 8.0.0.5 and 8.5.0.1.  Please refer to the Recommended
    Updates page for delivery information:
    http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
    

Temporary fix

Comments

APAR Information

  • APAR number

    PM60915

  • Reported component name

    WEBS APP SERV N

  • Reported component ID

    5724H8800

  • Reported release

    800

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2012-03-21

  • Closed date

    2012-04-03

  • Last modified date

    2012-08-07

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    PM75374

Fix information

  • Fixed component name

    WEBS APP SERV N

  • Fixed component ID

    5724H8800

Applicable component levels

  • R800 PSY

       UP



Document information

More support for: WebSphere Application Server
General

Software version: 8.0

Reference #: PM60915

Modified date: 07 August 2012