#20 Signed EXE => Invalid or corrupt jarfile

[Steve Alberty]

For using programs in Vista it's always a good idea to sign the exe made by Launch4J.

Unfortunately if you sign the exe sometimes Launch4J resulting:

Invalid or corrupt jarfile

This is especially if you're using console mode applications.

I've test it with Microsoft signtool.exe.

Regards,

Steve

[Steve Sobol]

Logged In: YES
user_id=1275982
Originator: NO

Steve -

On which version(s) of Windows are you seeing this problem?

Thanks
Steve S

[Steve Alberty]

Logged In: YES
user_id=234398
Originator: YES

On Windows XP SP2.

[Steve Sobol]

Logged In: YES
user_id=1275982
Originator: NO

I'm installing as little of the Microsoft Platform SDK as I can. I only want signtool.exe. :) I am running WinXP Home SP2, so I should be able to duplicate this problem on my laptop.

[Steve Sobol]

Logged In: YES
user_id=1275982
Originator: NO

OK. Managed to get signtool.exe only downloading 83MB worth of junk from M$! I'll look into this.

[Steve Sobol]

Logged In: YES
user_id=1275982
Originator: NO

OK, any suggestions where I can get a code-signing certificate? I don't really have the US$200-400 that a lot of companies want for these certs. Even a 30-day trial cert would be great... except the only companies I know of that do the 30-day trials *don't* do them for codesigning (only for server-side SSL).

Thanks in advance...

[Volker Berlin]

Logged In: YES
user_id=836056
Originator: NO

I am understand your problem. You can create a test certificate with the MS Certificate Server (or Certificate Services). It is part of the server OS like Win 2000 and Win 2003. If this is not possible for you then contact me per email. I will create a test certificate and send it you.

Volker

[Steve Sobol]

Logged In: YES
user_id=1275982
Originator: NO

Volker,

Thanks for the suggestion. I didn't even consider doing a test certificate! I have access to a number of Win2k3 servers, so no need to send me anything. Will generate a certificate and start testing with it.

[Steve Sobol]

Logged In: YES
user_id=1275982
Originator: NO

I still haven't had a chance to look at this yet, although I'm hoping to take care of a bunch of Tracker items this month. However, I would like to point everyone to this Open Discussion thread over in the forums...

http://sourceforge.net/forum/forum.php?thread_id=1730039&forum_id=332683

Steve, are you wrapping the JAR inside the EXE?

[Grzegorz Kowal]

Logged In: YES
user_id=917657
Originator: NO

Will not work, signing may and probably will corrupt the jar which is not a typical PE resource. The solution is to use dontWrapJar=true, then you will be able to sign the executable and the jar itself.

Grzegorz