Java Web Start 1.8.0_74 and Higher Reports Signed Jars Are Unverifiable While Jarsigner Verifies Without Issue (Doc ID 2160697.1)

Last updated on JULY 17, 2016

Applies to:

Java SE JDK and JRE - Version 8 and later
Information in this document applies to any platform.

Symptoms

On : Java SE 8 update 74 and above

ACTUAL BEHAVIOR
---------------
Java Web Start (JWS) for Java SE version 1.8.0_74 and later reports signed jars are unverifiable while jarsigner verifies without issue the same jar files.  During the initial security validation of the application, an error is displayed stating that the application is being blocked because JWS could not verify the signing in some of the resources.

EXPECTED BEHAVIOR
-----------------------
It is expected that this would work as it had previously with Java SE 8 update 73 and below.

STEPS
-----------------------
The issue can be reproduced at will with the following steps:
     1. Try running a jar file as a JWS application using the affected version of Java SE.

Changes

 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms