Skip to main content


Eclipse Community Forums
Forum Search:

Search      Help    Register    Login    Home
Home » Eclipse Projects » Paho » Eclipse mqtt jar throws SecurityExceptionInvalid signature file digest for Manifest main attributes
Eclipse mqtt jar throws SecurityExceptionInvalid signature file digest for Manifest main attributes [message #1585222] Mon, 26 January 2015 06:27 Go to next message
nandini nelson is currently offline nandini nelsonFriend
Messages: 3
Registered: January 2015
Junior Member
Hi,

I am using mqtt as a client to get messagaes from the mqtt broker.
Previously I had 0.2.1 which had a issue in clientId generation ( greater than 23 characters would fail)

I saw the fix is done in later versions, so I upgraded to 1.0.1.
I downloaded the 1.0.1 jar from the below repository
eclipse repo [ /content/repositories/paho-releases/org/eclipse/paho/org.eclipse.paho.client.mqttv3/1.0.1/]

I get:
Exception in thread "main" java.lang.SecurityException: Invalid signature file digest for Manifest main attributes
at sun.security.util.SignatureFileVerifier.processImpl(SignatureFileVerifier.java:240)
at sun.security.util.SignatureFileVerifier.process(SignatureFileVerifier.java:193)
at java.util.jar.JarVerifier.processEntry(JarVerifier.java:262)
at java.util.jar.JarVerifier.update(JarVerifier.java:216)


I googled and found solutions to fix the issue.
I removed the META-INF and zipped the jar again. It solved my problem for the time being. But this should not be done as I understand.

I had found other fixes which didnt help were putting the below configuration in my pom.

<configuration>
<filters>
<filter>
<artifact>*:*</artifact>
<excludes>
<exclude>META-INF/*.SF</exclude>
<exclude>META-INF/*.DSA</exclude>
<exclude>META-INF/*.RSA</exclude>
</excludes>
</filter>
</filters>
</configuration>


Later I ran jarsigner -verify org.eclipse.paho.client.mqttv3-1.0.1.jar

I got the following
jar verified.

Warning:
This jar contains entries whose signer certificate will expire within six months.


The signer certificate expiring in 6 months.

I am not sure if I should be downloading the same jar or not.

Thanks for your help in advance.

Re: Eclipse mqtt jar throws SecurityExceptionInvalid signature file digest for Manifest main attribu [message #1585813 is a reply to message #1585222] Mon, 26 January 2015 13:50 Go to previous messageGo to next message
Eric Rizzo is currently offline Eric RizzoFriend
Messages: 3071
Registered: July 2009
Senior Member
Moving this to the Paho forum.
Re: Eclipse mqtt jar throws SecurityExceptionInvalid signature file digest for Manifest main attribu [message #1588647 is a reply to message #1585813] Wed, 28 January 2015 02:28 Go to previous messageGo to next message
nandini nelson is currently offline nandini nelsonFriend
Messages: 3
Registered: January 2015
Junior Member
Thanks Eric.
Re: Eclipse mqtt jar throws SecurityExceptionInvalid signature file digest for Manifest main attribu [message #1600060 is a reply to message #1588647] Wed, 04 February 2015 02:27 Go to previous message
nandini nelson is currently offline nandini nelsonFriend
Messages: 3
Registered: January 2015
Junior Member
Eclipse packages as and puts osgi budndles in their maven repo.
This is how I made it work:

* download mqtt jar & pom from eclipse repo
* download all its dependencies
* unjar the jar
* From
META-INF/MANIFEST.MF remove all lines apart from first 3
<pre>Manifest-Version: 1.0 Bundle-Localization: bundle
Bundle-RequiredExecutionEnvironment: J2SE-1.4 </pre>
* Remove the
certificates in META-INF folder
* now jar all the unjared files to
the same jar name
* Upload in your maven repo
Previous Topic:Paho Client Tool and Subscriber tool running on local host
Next Topic:Loop functions
Goto Forum:
  


Current Time: Tue Nov 20 11:49:33 GMT 2018

Powered by FUDForum. Page generated in 0.02291 seconds
.:: Contact :: Home ::.

Powered by: FUDforum 3.0.2.
Copyright ©2001-2010 FUDforum Bulletin Board Software

Back to the top