PM60915: EAREXPANDER BREAKS THE SIGNATURE OF SIGNED JAR FILES

8.5.0.1: WebSphere Application Server V8.5 Fix Pack 1
8.0.0.5: WebSphere Application Server V8.0 Fix Pack 5
8.5.0.2: WebSphere Application Server V8.5 Fix Pack 2
8.0.0.6: WebSphere Application Server V8.0 Fix Pack 6
8.0.0.7: WebSphere Application Server V8.0 Fix Pack 7
8.0.0.8: WebSphere Application Server V8.0 Fix Pack 8
8.0.0.9: WebSphere Application Server V8.0 Fix Pack 9
8.0.0.10: WebSphere Application Server V8.0 Fix Pack 10
8.0.0.11: WebSphere Application Server V8.0 Fix Pack 11
8.0.0.12: WebSphere Application Server V8.0 Fix Pack 12
8.0.0.13: WebSphere Application Server V8.0 Fix Pack 13
8.0.0.14: WebSphere Application Server V8.0 Fix Pack 14
8.0.0.15: WebSphere Application Server V8.0 Fix Pack 15

APAR status

• Closed as program error.

Error description

• EAR expansion (EARExpander) processing in WebSphere
  Application Server V8.0 breaks the signature of signed jar
  files.
  
  1. Expand the EAR file using EARExpander.
  2. Locate the signed jar for signature verification.
  3. Verify the jar using the java command: "jarsigner -verify
  -verbose <jarFileName>"
  
  Result: Jar is NOT verified and you get the following error
  message:
  
  jarsigner: java.lang.SecurityException: Invalid signature file
  digest for Manifest main attributes.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server V8.0 who have applications that      *
  *                  contain signed archive files.               *
  ****************************************************************
  * PROBLEM DESCRIPTION: After expanding the EAR, the            *
  *                      signature of a signed archive file      *
  *                      contained within the EAR is no          *
  *                      longer valid.                           *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  The problem occurs because MANIFEST.MF files are rewritten
  unnecessarily.
  

Problem conclusion

• The code is changed to rewrite archive files only when
  necessary, and to use the original MANIFEST.MF when doing so.
  
  The fix for this APAR is currently targeted for inclusion in
  fix packs 8.0.0.5 and 8.5.0.1.  Please refer to the Recommended
  Updates page for delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  PM75374

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels

• R800 PSY

     UP