PQ82321: Verification Failed (Invalid Signature) when upgrading to 4.0.6

APAR status
Closed as user error.

Error description
Customer has an example program that verifies a correct signed
message in WebSphere (SOAP signing icw).

If you run this with a JDK from Websphere 4.0.1-4.05 the
verification is succesful.  If you run this with a JDK from
Websphere 4.0.6-4.0.7 the verification fails.  (Caused by an
IndexOutofBoundException in a class of the ibmjceprovider.jar).

WebSphere 4.0.5 > no problems.
Since version 4.06 customer gets "invalid signature"
CU also tried 4.07 and same problem.

CU copied JDK libraries from 4.0.5 and this fixed the problem,
so problem seems JDK related. However, this is not an acceptable
solution for the production system.

Problem has been recreated in support lab.

output at 405:
Verification Finished Successfully

output at 406:
Verification failed. Reason [SOAP Exception: fault
Code=SOAP-ENV:Client;
msg = Invalid signature



Downloaded the latest (following files) from JIM:
ibmjceprovider.jar      690,728
ibmpkcs.jar  688,671
ibmpkcs11.jar  76,187

1. stopped the application server
2. moved existing files
(ibmjceprovider.jar,ibmpkcs.jar,ibmpkcs11.jar)
to tmp directory
3. replaced old jar's with files mentioned above
4. Started the application server
5. Ran customer script, again, we get the below error:

Verification Failed. Reason: [SOAPException:
faultCode=SOAP-ENV:Client; msg=Invalid signature]
Local fix Problem summary Problem conclusion Temporary fix Comments
The reason for the failure was the signature length did not
match the key length.  This was a programatic error in the
application.
APAR information
APAR number PQ82321
Reported component name WEBSPHERE AE AI
Reported component ID 5630A2200
Reported release 400
Status CLOSED USE
PE NoPE
HIPER NoHIPER
Submitted date 2003-12-16
Closed date 2004-03-01
Last modified date 2004-03-01

APAR is sysrouted FROM one or more of the following:

APAR is sysrouted TO one or more of the following:

Modules/Macros

Fix information

Applicable component levels


Document Information


Product categories: Software > Application Servers > Distributed Application & Web Servers > WebSphere Application Server > General
Operating system(s):
Software version: 400
Software edition:
Reference #: PQ82321
IBM Group: Software Group
Modified date: Mar 1, 2004