Re: [Wrapper-user] Unresolved checksum error - Please Help

SourceForge Headquarters 1320 Columbia Street Suite 310 San Diego, CA 92101 +1 (858) 422-6466

Hello Kaiwal,

I'm very sorry.

The error you are seeing means that the certification chain processed
correctly but terminated in a root certificate that is not trusted by the
trust provider.

>From the flow of your log output, I can see that the certificate
verification actually took quite a significant time to finish ~15 sec. We
have addressed this issue in 3.5.11 by running the signature check in an
separate thread:

- Fix a problem on Windows where the Wrapper was taking 15 seconds or
longer to startup on some systems because the WinVerifyTrust system call
was having problems updating the CRL. This had been a problem since the
Wrapper binaries started being signed in 3.5.7. If the WinVerifyTrust call
takes longer than the configured wrapper.startup_thread.timeout property
then the Wrapper will continue to startup without further delay.

The Wrapper will shutdown if the signature check reveals any direct problem
with our signature, the Wrapper will shutdown.  In your case the message,
about the root certificate, is actually "only" a warning and will NOT lead
the Wrapper to shutdown.

The reason the Wrapper is shutting down, is shown in the following line:
FATAL  | wrapper  | 2012/03/29 10:13:34 | Unable to execute Java command.
The system cannot find the file specified. (0x2)

This means that the following property needs your attention:
wrapper.java.command=java

This tells the Wrapper to look up the java command from the PATH variable.
When you run your application  as service under the System User accounts,
the environment variables are probably different compared to your normal
user account. You can fix the issue by making sure the java-binary is
actually on the path.
For more information, please refer to the following page:
http://wrapper.tanukisoftware.com/doc/english/prop-java-command.html

Taking a closer look, you probably also want to take a look at the
following issues as well:
- wrapper.java.mainclass is specified twice.
-wrapper.app.parameter.1 is commented out. you need to specify the name of
the main-class of your application in order that the WrapperSimpleApp
invokes anything.

Hope this information helps you out.

Best Regards,

Christian Mueller
Tanuki Software, Ltd.

On Sat, Apr 14, 2012 at 4:21 AM, Patel, Kaiwal <kai...@jp...>wrote:

> Hello,****
>
> ** **
>
> I am getting following checksum error:****
>
> -----------------------------------------------****
>
> Checksum error - from .log file****
>
> -----------------------------------------------****
>
> ADVICE | wrapper  | 2012/03/29 10:35:51 | ****
>
> FATAL  | wrapper  | 2012/03/29 10:35:51 | Critical error: wait for JVM
> process failed****
>
> ERROR  | wrapper  | 2012/03/29 10:36:05 | A signature was found in
> "C:\epagent\bin\epawrapper.exe", but checksum failed: (Errorcode:
> 0x800b0109) The operation completed successfully. (0x0)****
>
> ERROR  | wrapper  | 2012/03/29 10:36:05 |   Signer Certificate:****
>
> ERROR  | wrapper  | 2012/03/29 10:36:05 |     Serial Number: ****
>
> ERROR  | wrapper  | 2012/03/29 10:36:05 |       00 97 06 fe b5 6e 56 cc cb
> 66 3a bb 55 a7 a0 e4 76 ****
>
> ERROR  | wrapper  | 2012/03/29 10:36:05 |     Issuer Name:
> UTN-USERFirst-Object****
>
> ERROR  | wrapper  | 2012/03/29 10:36:05 |     Subject Name: Tanuki
> Software Ltd.****
>
> ERROR  | wrapper  | 2012/03/29 10:36:05 |   TimeStamp Certificate:****
>
> ERROR  | wrapper  | 2012/03/29 10:36:05 |     Serial Number: ****
>
> ERROR  | wrapper  | 2012/03/29 10:36:05 |       47 8a 8e fb 59 e1 d8 3f 0c
> e1 42 d2 a2 87 07 be ****
>
> ERROR  | wrapper  | 2012/03/29 10:36:05 |     Issuer Name:
> UTN-USERFirst-Object****
>
> ERROR  | wrapper  | 2012/03/29 10:36:05 |     Subject Name: COMODO Time
> Stamping Signer****
>
> ERROR  | wrapper  | 2012/03/29 10:36:05 |****
>
> -----------------------------------------------****
>
> ** **
>
> *Details about wrapper:*
>
> Wrapper Version 32-bit 3.5.12****
>
> OS Windows Server 2008 R2 Standard****
>
> wrapper.conf - Attached (epawrapper.conf)****
>
> wrapper.log - Attached (epawrapper.log)****
>
> ** **
>
> I also tried adding .crt file - According to help page at:****
>
> http://wrapper.tanukisoftware.com/doc/german/troubleshooting.html#13 ****
>
> -----------------------------------------------****
>
> *“The error occurred due to the counter-signer of our signature -
> Comodo's UTN-USERFirst-Object. The installed certificates can be
> investigated from the Windows Certificate Manager certmgr.msc. The
> UTN-USERFirst-Object Certificate should be present in the "Third Parties
> Root Certification Authorities\Certificates". If not, their root
> certificate can be downloaded from here: *
>
> *
> https://support.comodo.com/index.php?_m=downloads&_a=viewdownload&downloaditemid=79
> *
>
> * *
>
> *If it is present this might mean, the Local Security Policy of the
> server is too tight to allow the certificate to be verified. This settings
> can be found in the Local Security Policy of the server the "Public Key
> Policies"\"Certificate Path Validation Settings" and allows for the Root
> Certificate Store "Third-Party Root CAs and Enterprise Root CAs". If this
> doesn't/can't be set to active, another option would be to move the
> "UTN-USERFirst-Object Certificate" from the "Third Party Root CA" folder to
> the "Trusted Root Certificate Authorities" folder.”*
>
> -----------------------------------------------****
>
> But it did not help to solve problem.****
>
> ** **
>
> Please help me resolve this error.****
>
> ** **
>
> Thanks****
>
> - Kaiwal****
>
> ** **
>
> This communication is for informational purposes only. It is not intended
> as an offer or solicitation for the purchase or sale of any financial
> instrument or as an official confirmation of any transaction. All market
> prices, data and other information are not warranted as to completeness or
> accuracy and are subject to change without notice. Any comments or
> statements made herein do not necessarily reflect those of JPMorgan Chase &
> Co., its subsidiaries and affiliates. This transmission may contain
> information that is privileged, confidential, legally privileged, and/or
> exempt from disclosure under applicable law. If you are not the intended
> recipient, you are hereby notified that any disclosure, copying,
> distribution, or use of the information contained herein (including any
> reliance thereon) is STRICTLY PROHIBITED. Although this transmission and
> any attachments are believed to be free of any virus or other defect that
> might affect any computer system into which it is received and opened, it
> is the responsibility of the recipient to ensure that it is virus free and
> no responsibility is accepted by JPMorgan Chase & Co., its subsidiaries and
> affiliates, as applicable, for any loss or damage arising in any way from
> its use. If you received this transmission in error, please immediately
> contact the sender and destroy the material in its entirety, whether in
> electronic or hard copy format. Thank you. Please refer to
> http://www.jpmorgan.com/pages/disclosures for disclosures relating to
> European legal entities.
>
>
> ------------------------------------------------------------------------------
> For Developers, A Lot Can Happen In A Second.
> Boundary is the first to Know...and Tell You.
> Monitor Your Applications in Ultra-Fine Resolution. Try it FREE!
> http://p.sf.net/sfu/Boundary-d2dvs2
> _______________________________________________
> Wrapper-user mailing list
> Wra...@li...
> https://lists.sourceforge.net/lists/listinfo/wrapper-user
>
>