[jira] [Commented] (SMX4-1321) Saxon bundle includes Saxon jar signatures

["Freeman Fang (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/SMX4-1321?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13533585#comment-13533585 ] 

Freeman Fang commented on SMX4-1321:
------------------------------------

Hi JB,

As we wrap the original saxon jar to make it OSGi friendly, so the jar content actually changed a bit, so I don't think the original signature still applicable for the new saxon bundle, we can get some error like
{code}
java.lang.SecurityException: Invalid signature file digest for Manifest main attributes
        at sun.security.util.SignatureFileVerifier.processImpl(SignatureFileVerifier.java:240)
        at sun.security.util.SignatureFileVerifier.process(SignatureFileVerifier.java:193)
        at java.util.jar.JarVerifier.processEntry(JarVerifier.java:305)
        at java.util.jar.JarVerifier.update(JarVerifier.java:216)
        at java.util.jar.JarFile.initializeVerifier(JarFile.java:341)
        at java.util.jar.JarFile.getInputStream(JarFile.java:406)
        at sun.misc.URLClassPath$JarLoader$2.getInputStream(URLClassPath.java:752)
        at sun.misc.Resource.cachedInputStream(Resource.java:77)
        at sun.misc.Resource.getByteBuffer(Resource.java:160)
        at java.net.URLClassLoader.defineClass(URLClassLoader.java:436)
        at java.net.URLClassLoader.access$100(URLClassLoader.java:71)
        at java.net.URLClassLoader$1.run(URLClassLoader.java:361)
        at java.net.URLClassLoader$1.run(URLClassLoader.java:355)
        at java.security.AccessController.doPrivileged(Native Method)
        at java.net.URLClassLoader.findClass(URLClassLoader.java:354)
        at java.lang.ClassLoader.loadClass(ClassLoader.java:423)
        at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:308)
        at java.lang.ClassLoader.loadClass(ClassLoader.java:356)
{code}
when install the bundle.

Thanks
Freeman
                
> Saxon bundle includes Saxon jar signatures
> ------------------------------------------
>
>                 Key: SMX4-1321
>                 URL: https://issues.apache.org/jira/browse/SMX4-1321
>             Project: ServiceMix 4
>          Issue Type: Bug
>          Components: Bundles
>            Reporter: Dhiraj Bokde
>            Assignee: Jean-Baptiste Onofré
>         Attachments: patch-saxon-sig.txt
>
>
> Saxon 9.4.0.1 and 9.4.0.4 include Saxon jar signature files *.SF and *.RSA

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira