PQ82321: Verification Failed (Invalid Signature) when upgrading to 4.0.6 | |||||||||||||||||||||||||
![]() |
|||||||||||||||||||||||||
APAR status Closed as user error. Error description Customer has an example program that verifies a correct signed message in WebSphere (SOAP signing icw). If you run this with a JDK from Websphere 4.0.1-4.05 the verification is succesful. If you run this with a JDK from Websphere 4.0.6-4.0.7 the verification fails. (Caused by an IndexOutofBoundException in a class of the ibmjceprovider.jar). WebSphere 4.0.5 > no problems. Since version 4.06 customer gets "invalid signature" CU also tried 4.07 and same problem. CU copied JDK libraries from 4.0.5 and this fixed the problem, so problem seems JDK related. However, this is not an acceptable solution for the production system. Problem has been recreated in support lab. output at 405: Verification Finished Successfully output at 406: Verification failed. Reason [SOAP Exception: fault Code=SOAP-ENV:Client; msg = Invalid signature Downloaded the latest (following files) from JIM: ibmjceprovider.jar 690,728 ibmpkcs.jar 688,671 ibmpkcs11.jar 76,187 1. stopped the application server 2. moved existing files (ibmjceprovider.jar,ibmpkcs.jar,ibmpkcs11.jar) to tmp directory 3. replaced old jar's with files mentioned above 4. Started the application server 5. Ran customer script, again, we get the below error: Verification Failed. Reason: [SOAPException: faultCode=SOAP-ENV:Client; msg=Invalid signature]Local fix Problem summary Problem conclusion Temporary fix Comments The reason for the failure was the signature length did not match the key length. This was a programatic error in the application.
APAR is sysrouted FROM one or more of the following: APAR is sysrouted TO one or more of the following: Modules/Macros
|
Document Information |
Product categories: Software > Application Servers >
Distributed Application & Web Servers > WebSphere Application
Server > General
Operating system(s):
Software version: 400
Software edition:
Reference #: PQ82321
IBM Group: Software Group
Modified date: Mar 1, 2004
(C) Copyright IBM Corporation 2000, 2006. All Rights Reserved.