IBM Support

ITM 6.x JavaWebstart issue after Oracle Sun JRE 1.8.0_141 update

Technical Blog Post


Abstract

ITM 6.x JavaWebstart issue after Oracle Sun JRE 1.8.0_141 update

Body

Dear clients,

we have some customers who have reported problems after the update to Oracle Sun JRE 1.8.0_141.

The JWS is failing with the following error;

Wrapped Exception:
java.lang.SecurityException: digest missing for com/ibm/ps/uil
    at sun.security.util.ManifestEntryVerifier.verify(Unknown Source)
    at java.util.jar.JarVerifier.processEntry(Unknown Source)
    at java.util.jar.JarVerifier.update(Unknown Source)
    at java.util.jar.JarVerifier$VerifierStream.<init>(Unknown Source)
    at java.util.jar.JarFile.getInputStream(Unknown Source)

Exception:
com.sun.deploy.net.JARSigningException: Could not verify signing in resource: http://FTOHubA:15200/classes/cnp_ps.jar
    at com.sun.deploy.security.JarVerifier.authenticateJarEntry(Unknown Source)
    at com.sun.deploy.security.EnhancedJarVerifier.validate(Unknown Source)
    at com.sun.deploy.cache.CacheEntry.processJar(Unknown Source)

imageimage

This issue is related due a known bug in this Oracle Sun JRE built 141 and not with a certain ITM jar file.

Oracle has provided a fixed built Oracle Sun JRE 1.8.0_144.

From the Oracle Sun JRE 1.8.0_144 release node:

http://www.oracle.com/technetwork/java/javase/8u144-relnotes-3838694.html

Bug Fixes

security-libs/javax.net.ssl
java.util.zip.ZipFile.getEntry() now always returns the ZipEntry instance with a / ended entry name for directory entry
The java.util.zip.ZipEntry API doc specifies "A directory entry is defined to be one whose name ends with a /". However, in previous JDK releases, java.util.zip.ZipFile.getEntry(String entryName) may return a ZipEntry instance with an entry name that does not end with / for an existing zip directory entry when

  •     the passed in argument entryName does not end with a /, and
  •     there is a matching zip directory entry with name entryName + / in the zip file.

With this release, the name of the ZipEntry instance returned from java.util.zip.ZipFile.getEntry() always ends with / for any zip directory entry.
To revert to the previous behavior, set the system property jdk.util.zip.ensureTrailingSlash to "false".


This change was made in order to fix a regression introduced in JDK 8u141 when verifying signed JARs that has caused some WebStart applications to fail to load.

See JDK-8184993

Solution:
Please update your JRE to Oracle Sun JRE 1.8.0_144 and your JWS will work again.

 

rgs

#jens

image

Subscribe and follow us for all the latest information directly on your social feeds:

image

image

image

  



 

Check out all our other posts and updates:

Academy Blogs: https://goo.gl/U7cYYY
Academy Videos: https://goo.gl/TLfMoF
Academy Google+: https://goo.gl/HnTs0w
Academy Twitter : https://goo.gl/AhR8CL








 

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSVJUL","label":"IBM Application Performance Management"},"Component":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}}]

UID

ibm11277188