Signing .jar Files for 11g / SIGN_WEBUTIL.BAT Command Results in Error "The Syntax of the Command is Incorrect" (Doc ID 1076945.1)

Last updated on FEBRUARY 16, 2017

Applies to:

Oracle Forms - Version 11.0.0 to 11.1.2.0.0 [Release 11.0.0 to 11g]
Information in this document applies to any platform.

Symptoms

NOTE: While the script in this note may be used initially to create a keystore and self sign jacob.jar file it was not originally intended to be used to self sign multiple jar files.  Oracle recommends that jar files be signed with a certificate from a Trusted Certificate Authority.  Please refer to <Note 2065434.1> for detailed steps on jar file signing.

 

Overview

The sign_webutil.sh(bat) courtesy script was provided to Oracle Forms customers as an example demonstrating how custom jar files such as jacob.jar can be signed with a self signed certificate.  Once the script is successfully run the first time a self-signed certificate is created as defined in the script and the jar file specified is signed. The focus of this document is to discuss how to use the sign_webutil.sh(bat) and the resulting keystore file to create signatures for use with Forms 11g. 

Note:  The sign_webutil.sh(bat) courtesy script was primarily designed to make signing jacob.jar a one step process.  Once you've run it, the resulting keystore can be used to sign other jar files and this is the focus of this note.  However, if you wish to sign more than one custom jar file or sign your jar files with a certificate from a recognized Trusted Certificate Authority then we recommend you use the following note:

<Note 2065434.1> Jar File Signing for Forms – Addressing JRE Java Security Warnings such as “Do you want to run this application?", "Application Blocked by Java Security","Running this application may be a security risk", etc

In Forms 11g, when trying to sign jacob.jar (or any other jar file) with the provided sign_webutil.bat the following message may be encountered :

ORACLE_INSTANCE\bin\sign_webutil.bat %ORACLE_HOME%\forms\java\jacob.jar
The syntax of the command is incorrect.

Changes

The sign_webutil.bat that comes with Forms 11g allows users to specify their own KEYSTORE_PASSWORD and JAR_KEY_PASSWORD

In addition, there are changes related to Jar File signing beginning in the April 2013 CPU patch which may affect your Forms application. Please carefully read <note 1594575.1> and <Note 1542463.1> and the links to the Java Security related information in those notes.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms