Eclipse Community Forums: Paho » Eclipse mqtt jar throws SecurityExceptionInvalid signature file digest for Manifest main attributes

Home » Eclipse Projects » Paho » Eclipse mqtt jar throws SecurityExceptionInvalid signature file digest for Manifest main attributes

Show: Today's Messages :: Show Polls :: Message Navigator

Eclipse mqtt jar throws SecurityExceptionInvalid signature file digest for Manifest main attributes [message #1585222]

Mon, 26 January 2015 06:27

nandini nelson

Messages: 3
Registered: January 2015

Junior Member

Hi,

I am using mqtt as a client to get messagaes from the mqtt broker.
Previously I had 0.2.1 which had a issue in clientId generation ( greater than 23 characters would fail)

I saw the fix is done in later versions, so I upgraded to 1.0.1.
I downloaded the 1.0.1 jar from the below repository
eclipse repo [ /content/repositories/paho-releases/org/eclipse/paho/org.eclipse.paho.client.mqttv3/1.0.1/]

I get:
Exception in thread "main" java.lang.SecurityException: Invalid signature file digest for Manifest main attributes
at sun.security.util.SignatureFileVerifier.processImpl(SignatureFileVerifier.java:240)
at sun.security.util.SignatureFileVerifier.process(SignatureFileVerifier.java:193)
at java.util.jar.JarVerifier.processEntry(JarVerifier.java:262)
at java.util.jar.JarVerifier.update(JarVerifier.java:216)

I googled and found solutions to fix the issue.
I removed the META-INF and zipped the jar again. It solved my problem for the time being. But this should not be done as I understand.

I had found other fixes which didnt help were putting the below configuration in my pom.

<configuration>
<filters>
<filter>
<artifact>*:*</artifact>
<excludes>
<exclude>META-INF/*.SF</exclude>
<exclude>META-INF/*.DSA</exclude>
<exclude>META-INF/*.RSA</exclude>
</excludes>
</filter>
</filters>
</configuration>

Later I ran jarsigner -verify org.eclipse.paho.client.mqttv3-1.0.1.jar

I got the following
jar verified.

Warning:
This jar contains entries whose signer certificate will expire within six months.

The signer certificate expiring in 6 months.

I am not sure if I should be downloading the same jar or not.

Thanks for your help in advance.

Report message to a moderator

Re: Eclipse mqtt jar throws SecurityExceptionInvalid signature file digest for Manifest main attribu [message #1585813 is a reply to message #1585222]

Mon, 26 January 2015 13:50

Eric Rizzo

Messages: 3070
Registered: July 2009

Senior Member

Moving this to the Paho forum.

Report message to a moderator

Re: Eclipse mqtt jar throws SecurityExceptionInvalid signature file digest for Manifest main attribu [message #1588647 is a reply to message #1585813]

Wed, 28 January 2015 02:28

nandini nelson

Messages: 3
Registered: January 2015

Junior Member

Thanks Eric.

Report message to a moderator

Re: Eclipse mqtt jar throws SecurityExceptionInvalid signature file digest for Manifest main attribu [message #1600060 is a reply to message #1588647]

Wed, 04 February 2015 02:27

nandini nelson

Messages: 3
Registered: January 2015

Junior Member

Eclipse packages as and puts osgi budndles in their maven repo.
This is how I made it work:

* download mqtt jar & pom from eclipse repo
* download all its dependencies
* unjar the jar
* From
META-INF/MANIFEST.MF remove all lines apart from first 3
<pre>Manifest-Version: 1.0 Bundle-Localization: bundle
Bundle-RequiredExecutionEnvironment: J2SE-1.4 </pre>
* Remove the
certificates in META-INF folder
* now jar all the unjared files to
the same jar name
* Upload in your maven repo

Report message to a moderator

Previous Topic:	Paho Client Tool and Subscriber tool running on local host
Next Topic:	Loop functions

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Thu Apr 25 08:58:21 GMT 2024

.:: Contact :: Home ::.

Breadcrumbs

Sign up to our Newsletter