IBM Support

IV35527: JAR VERIFICATION FAILS ON JARS THAT ARE SIGNED WITH SOME OF THE MESSAGEDIGEST ALGORITHMS

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • Error Message: When you try to verify a JAR which is signed with
MessageDigest algorithms SHA2, SHA3 or SHA5, we get the
following error with Java 6:
jar is unsigned. (signatures missing or not parsable)
With Java 7, it says the JAR is verified, but we get the warning
shown below:
jar verified.
Warning:
This jar contains unsigned entries which have not been
integrity-checked
.
Stack Trace: N/A
.

Local fix

  • 



Problem summary


    

  • The problem is caused as the BootstrapProvider which is used
during JAR verification, did not contain these algorithms in its
list of supported algorithms.

    



Problem conclusion


    

  • This defect will be fixed in:
6.0.0 SR13
6.0.1 SR7
7.0.0 SR4
.
The JDK has been updated to add the SHA2, SHA3 and SHA5
algorithms to the list of supported algorithms in
BootstrapProvider.

    



Temporary fix


    

  • 



Comments


    

  • 



APAR Information




    

  • APAR number
    IV35527
    • 

  • Reported component name
    JAVA CLASS LIBS
    • 

  • Reported component ID
    620700130
    • 

  • Reported release
    600
    • 

  • Status
    CLOSED  PER
    • 

  • PE
    NoPE
    • 

  • HIPER
    NoHIPER
    • 

  • Special Attention
    NoSpecatt
    • 

  • Submitted date
    2013-01-18
    • 

  • Closed date
    2013-01-18
    • 

  • Last modified date
    2013-10-03
    • 





    

  • APAR is sysrouted FROM one or more of the following:
    

    • 

  • APAR is sysrouted TO one or more of the following:
    

    • 



Fix information


    

  • Fixed component name
    JAVA CLASS LIBS
    • 

  • Fixed component ID
    620700130
    • 



Applicable component levels


    

  • R600  PSY
       UP
    • 

  • R700  PSY
       UP
    • 








      
              
                            

              

              [{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSCVQ3Y","label":"Java Class Libraries"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"6.0","Edition":"","Line of Business":{"code":"","label":""}}]
              

                          

          
 
        

      

    

      

        

          

            
Document Information


            

            


                        

            Modified date:
            

            03 October 2013
            

            
                      

        


        

        


      

    

  



    

  

  
    
            

          
Page Feedback