[jira] [Updated] (HIVE-8185) hive-jdbc-0.14.0-SNAPSHOT-standalone.jar fails verification for signatures in build

["Deepesh Khandelwal (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/HIVE-8185?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Deepesh Khandelwal updated HIVE-8185:
-------------------------------------
    Attachment: HIVE-8185.1.patch

Potential patch, can someone review? The problem here existed from HIVE-538 which had the change to produce the artifact. HIVE-8126 was just to include it in the lib directory of distribution. The issue is that there the uber jar was built from classes from some signed jars and those two additional files (META-INF/DUMMY.SF, META-INF/DUMMY.DSA) were picked up from one of those. We need to explicitly exclude them and that is what the patch intends to do.

> hive-jdbc-0.14.0-SNAPSHOT-standalone.jar fails verification for signatures in build
> -----------------------------------------------------------------------------------
>
>                 Key: HIVE-8185
>                 URL: https://issues.apache.org/jira/browse/HIVE-8185
>             Project: Hive
>          Issue Type: Bug
>          Components: JDBC
>    Affects Versions: 0.14.0
>            Reporter: Gopal V
>            Priority: Critical
>         Attachments: HIVE-8185.1.patch
>
>
> In the current build, running
> {code}
> jarsigner --verify ./lib/hive-jdbc-0.14.0-SNAPSHOT-standalone.jar
> Jar verification failed.
> {code}
> unless that jar is removed from the lib dir, all hive queries throw the following error 
> {code}
> Exception in thread "main" java.lang.SecurityException: Invalid signature file digest for Manifest main attributes
> 	at sun.security.util.SignatureFileVerifier.processImpl(SignatureFileVerifier.java:240)
> 	at sun.security.util.SignatureFileVerifier.process(SignatureFileVerifier.java:193)
> 	at java.util.jar.JarVerifier.processEntry(JarVerifier.java:305)
> 	at java.util.jar.JarVerifier.update(JarVerifier.java:216)
> 	at java.util.jar.JarFile.initializeVerifier(JarFile.java:345)
> 	at java.util.jar.JarFile.getInputStream(JarFile.java:412)
> 	at sun.misc.URLClassPath$JarLoader$2.getInputStream(URLClassPath.java:775)
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)