Hide Forgot
project_key: SOA There are some problems during verification of jar files signatures (error about expired certificate is ignored): Verifying file: seam/lib/gen/core.jar [ERROR] java.lang.SecurityException: Invalid signature file digest for Manifest main attributes Verifying file: jboss-as/server/all/deploy/soapui-client.sar/lib/soap-xmlbeans-1.2.jar [ERROR] java.lang.SecurityException: Invalid signature file digest for Manifest main attributes Verifying file: jboss-as/server/production/deploy/soapui-client.sar/lib/soap-xmlbeans-1.2.jar [ERROR] java.lang.SecurityException: Invalid signature file digest for Manifest main attributes Verifying file: jboss-as/server/default/deploy/soapui-client.sar/lib/soap-xmlbeans-1.2.jar [ERROR] java.lang.SecurityException: Invalid signature file digest for Manifest main attributes Verifying manifest file Manifest/MANIFEST.MF [ERROR] Manifest file not found. Some files (seam/lib/gen/core.jar) seem to contain 3rd party signatures (Eclipse).
Are files being changed after they are signed? Is this the cause? http://download.oracle.com/javase/tutorial/deployment/jar/verify.html
The jars are double signed; a recent mead update will remove the third party signatures so this should be fixed in ER5.
Still an issue in ER5: Verifying file: seam/lib/gen/core.jar [ERROR] java.lang.SecurityException: Invalid signature file digest for Manifest main attributes Verifying file: jboss-as/server/all/deploy/soapui-client.sar/lib/soap-xmlbeans-1.2.jar [ERROR] java.lang.SecurityException: Invalid signature file digest for Manifest main attributes Verifying file: jboss-as/server/default/deploy/soapui-client.sar/lib/soap-xmlbeans-1.2.jar [ERROR] java.lang.SecurityException: Invalid signature file digest for Manifest main attributes Verifying file: jboss-as/server/production/deploy/soapui-client.sar/lib/soap-xmlbeans-1.2.jar [ERROR] java.lang.SecurityException: Invalid signature file digest for Manifest main attributes https://hudson.qa.jboss.com/hudson/view/SOA-Release/job/soa-signatures/56/bits_type=EMBEDDED,jdk=java16_default,label=RHEL_any/artifact/report.txt
The signing changes didn't make it into Mead in time for ER5 but they are in now.
Release Notes Docs Status: Added: Not Required Writer: Added: dlesage
Verified with ER6