[virgo-dev] Issue with a servlet that uses RSA code

["Bolf, Didier" <didier.bolf@xxxxxxx>]

Hi

 

I have a problem with a ‘Web Application Bundle project’ that I’m developing

using the SpringSource Tool suite, I deploy the application on Virgo 3.0.0 M5

 

The project is a port of code that works in another OSGI product

 

When running a  servlet of the application I get the following exception,

It occurs when the servlet tries to load a file on disk :

 

java.lang.ExceptionInInitializerError

        com.xxx.bcm.BCM.<clinit>(BCM.java:1144)

        com.xxx.mds.resource.archive.bcm.BCMCipher.decrypt(BCMCipher.java:55)

        com.xxx.mds.resource.archive.Archive.load(Archive.java:624)

                …

java.lang.SecurityException

        com.rsa.cryptoj.f.ug.d(Unknown Source)

        com.rsa.cryptoj.f.ug.b(Unknown Source)

        com.rsa.cryptoj.f.nd.b(Unknown Source)

        com.rsa.cryptoj.f.nd.c(Unknown Source)

        com.rsa.jsafe.CryptoJ.isFIPS140Compliant(Unknown Source)

        com.xxx.bcm.internal.BcmRsaLib.initialize(BcmRsaLib.java:214)

        com.xxx.bcm.internal.BcmRsaLib.<clinit>(BcmRsaLib.java:289)

        com.xxx.bcm.BCM.<clinit>(BCM.java:1144)

 

the RSA code is obfuscated, the exception occurs there but I don’t know

exactly what is the problem :

 

private static void d()

 {

    JarFile localJarFile = hK.f();

    if (localJarFile == null)

      throw new SecurityException("Toolkit not encapsulated by a jar.");

    try

    {

      Manifest localManifest = localJarFile.getManifest();

      if (localManifest == null)

        throw new SecurityException("The jar does not contain a manifest.");

      a(localJarFile, localManifest);

      Enumeration localEnumeration = localJarFile.entries();

      while (localEnumeration.hasMoreElements())

      {

        JarEntry localJarEntry = (JarEntry)localEnumeration.nextElement();

        if (localJarEntry.isDirectory())

          continue;

        a(localJarEntry);

      }

    }

    catch (Throwable localThrowable)

    {

      throw new SecurityException(localThrowable.getMessage());

    }

    finally

    {

      a(localJarFile);

    }

  }

 

The RSA jar file is embedded in an eclipse plugin that I put in the Virgo

repository.

 

Thanks for your help

 

Didier