Mailing-List: contact user-help@geronimo.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@geronimo.apache.org
Received-SPF: pass (herse.apache.org: domain of jspotts@us.ibm.com designates
 32.97.110.154 as permitted sender)
content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----_=_NextPart_001_01C74EC2.BA36396A"
Subject: RE: Gbean within a signed jar
Date: Mon, 12 Feb 2007 11:27:45 -0500
Message-ID: <A99F00E9A39CF5428039DE37B2069B2107D28139@atlmaiexcp02.iss.net>
Thread-Topic: Gbean within a signed jar
Thread-Index: AcdNZxexE0Zm+GXmQhC+ZfqGuP9jUQBW3tFw
From: "Spotts, Joel \(ISS Atlanta\)" <jspotts@us.ibm.com>
To: <user@geronimo.apache.org>

This is a multi-part message in MIME format.

------_=_NextPart_001_01C74EC2.BA36396A
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Kevan,
=20
How do I turn off proxy generation? What do you mean by breaking admin
console? I wont be able to control that app from the admin console? Are
there other side effects?
=20
Thanks,
=20
Yoel

  _____ =20

From: Kevan Miller [mailto:kevan.miller@gmail.com]=20
Sent: Saturday, February 10, 2007 12:56 PM
To: user@geronimo.apache.org
Subject: Re: Gbean within a signed jar


On Feb 6, 2007, at 2:54 PM, Spotts, Joel ((ISS Atlanta)) wrote:


	I have a gbean packaged within a signed jar that is placed in my
EAR. Trouble is it seems that geronimo uses proxy classes on the gbean
class files, which results in the dreaded:

	java.lang.SecurityException: class "..."'s signer information
does not match signer information of other classes in the same package=20

	when geronimo attempts to start the gbean. Anyone have a
solution to this problem other than not signing the jar?


Hi Yoel,
Interesting. First I've heard of this problem, but it makes sense. I
don't really have a "solution" for you.

1) As you suggest,  don't sign your jar... :-P
2) Turn off proxy generation in the server. This, however, has the
unfortunate side-effect of breaking the admin console. So, this really
isn't much of an option.

Perhaps somebody else can chime in...

--kevan

------_=_NextPart_001_01C74EC2.BA36396A
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2900.2963" name=3DGENERATOR></HEAD>
<BODY=20
style=3D"WORD-WRAP: break-word; khtml-nbsp-mode: space; =
khtml-line-break: after-white-space">
<DIV dir=3Dltr align=3Dleft><SPAN class=3D984392616-12022007><FONT =
face=3DArial=20
color=3D#0000ff size=3D2>Kevan,</FONT></SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D984392616-12022007><FONT =
face=3DArial=20
color=3D#0000ff size=3D2></FONT></SPAN>&nbsp;</DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D984392616-12022007><FONT =
face=3DArial=20
color=3D#0000ff size=3D2>How do I turn off proxy generation? What do you =

mean&nbsp;by breaking admin console? I wont be able to control that app =
from the=20
admin console? Are there other side effects?</FONT></SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D984392616-12022007><FONT =
face=3DArial=20
color=3D#0000ff size=3D2></FONT></SPAN>&nbsp;</DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D984392616-12022007><FONT =
face=3DArial=20
color=3D#0000ff size=3D2>Thanks,</FONT></SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D984392616-12022007><FONT =
face=3DArial=20
color=3D#0000ff size=3D2></FONT></SPAN>&nbsp;</DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D984392616-12022007><FONT =
face=3DArial=20
color=3D#0000ff size=3D2>Yoel</FONT></SPAN></DIV><BR>
<DIV class=3DOutlookMessageHeader lang=3Den-us dir=3Dltr align=3Dleft>
<HR tabIndex=3D-1>
<FONT face=3DTahoma size=3D2><B>From:</B> Kevan Miller=20
[mailto:kevan.miller@gmail.com] <BR><B>Sent:</B> Saturday, February 10, =
2007=20
12:56 PM<BR><B>To:</B> user@geronimo.apache.org<BR><B>Subject:</B> Re: =
Gbean=20
within a signed jar<BR></FONT><BR></DIV>
<DIV></DIV><BR>
<DIV>
<DIV>On Feb 6, 2007, at 2:54 PM, Spotts, Joel ((ISS Atlanta)) =
wrote:</DIV><BR=20
class=3DApple-interchange-newline>
<BLOCKQUOTE type=3D"cite">
  <P><FONT face=3DArial size=3D2>I have a gbean packaged within a signed =
jar that is=20
  placed in my EAR. Trouble is it seems that geronimo uses proxy classes =
on the=20
  gbean class files, which results in the dreaded:</FONT></P>
  <P><FONT face=3DArial>java.lang.SecurityException: class "</FONT><FONT =

  face=3DArial>...</FONT><FONT face=3DArial>"'s signer information does =
not match=20
  signer information of other classes in the same package </FONT></P>
  <P><FONT face=3DArial size=3D2>when geronimo attempts to start the =
gbean. Anyone=20
  have a solution to this problem other than not signing the=20
jar?</FONT></P></BLOCKQUOTE><BR></DIV>
<DIV>Hi Yoel,</DIV>
<DIV>Interesting. First I've heard of this problem, but it makes sense. =
I don't=20
really have a "solution" for you.</DIV>
<DIV><BR class=3Dkhtml-block-placeholder></DIV>
<DIV>1) As you suggest,&nbsp; don't sign your jar... :-P</DIV>
<DIV>2) Turn off proxy generation in the server. This, however, has the=20
unfortunate side-effect of breaking the admin console. So, this really =
isn't=20
much of an option.</DIV>
<DIV><BR class=3Dkhtml-block-placeholder></DIV>
<DIV>Perhaps somebody else can chime in...</DIV>
<DIV><BR class=3Dkhtml-block-placeholder></DIV>
<DIV>--kevan</DIV></BODY></HTML>

------_=_NextPart_001_01C74EC2.BA36396A--