Welcome to Salem Houali ‘s Oracle Developer Notes

Extend the Self Signing Certificate’date of jar-files in Forms11gRelease2

Extend the Self Signing Certificate date of jar-files in Forms11gRelease2

Re-Sign Expired Jar-Files and Extend the Self Siging Certificate. réf Oracle (Doc ID 760815.1)
When you launch the java-control panel, you will see that the forms’certicate date is expired on july 6, 2013

DateCertificate

Remove the old jar file’ signature of Self Signing Certificate

First, begin by setting some local environment variables, we will do the test on WindowsXp machine
set JAR_PATH=C:\Oracle\Middleware\Oracle_FRHome1\forms\java
set UNSIGN_JAR_PATH=C:\LineCode_Projects\UnsJar
set JAVA_PATH=C:\Oracle\Middleware\Oracle_FRHome1\jdk\bin

# Remove the formsGraph.jar’ signature
Run the command :         %JAVA_PATH%jar xf formsGraph.jar

FormsGraphJarXF

 This, will extract META-INF folder and com folder

FormsGraphAfterJarXF

# Read the MANIFEST.MF -file
type META-INF\MANIFEST.MF

frmallMANIFEST_CTNT

Repeat the steps for each jar-file refrecend if your formsweb.cfg configuration file

# Forms applet archive setting for other clients (Sun Java Plugin, Appletviewer, etc)
archive=frmall.jar,FormsGraph.jar

Sign the jar-files and extend the expired self certificate referenced in the formsweb.cfg configuration file
Add the following environment variable to point the sign_webutil.bat script location
set FORMS_ORACLE_INSTANCE=C:\Oracle\Middleware\asinst_1

Edit your sign_webutil.bat-script and change the following values to generate new certificate.
Change the values as in the following example:

SET DN_CN=LineBCode Management
SET DN_OU=SalemBDevTools
SET DN_O=LineCodeBOracle
SET DN_C=CA
REM
REM Give your keystore file
SET KEYSTORE=”%HOMEDRIVE%%HOMEPATH%/.keystore”
REM
REM If KEYSTORE already exists, old KEYSTORE_PASSWORD for the keystore file must
REM be correctly given here. If KEYSTORE does not already exist, any password
REM given here will be taken for the new KEYSTORE file to be created.
REM
REM *** Remove the text after the ‘=’ below and replace with your password. ***
SET KEYSTORE_PASSWORD=yourpassword
REM
REM Give your alias key here.
REM
SET JAR_KEY=linecodeKey
REM
REM Key Password for the given key to be used for signing.
REM
REM *** Remove the text after the ‘=’ below and replace with your password. ***
SET JAR_KEY_PASSWORD=yourpassword
REM
REM Number of days before this certificate expires
REM
SET VALIDDAYS=2160

Issue to the following command to sign the specified JAR file.

cd %JAR_PATH%
%FORMS_ORACLE_INSTANCE%/bin/sign_webutil.bat jacob.jar

SignJacob

Verify the status the jar files.

# Run the following command
cd %JAR_PATH%
%JAVA_PATH%/jarsigner -verify appicons.jar

JarVerified

 Verify the end date of the signed jar-files

Let’s extract the frmwebutil.jar into the %UNSIGN_JAR_PATH% folder
%JAVA_PATH%/jar xf frmwebutil.jar
# META-INF folder’s content

FormsgraphManifest

# Print the L_WEBUTI.DSA content
%JAVA_PATH%/keytool -printcert -file META-INF/L_WEBUTI.DSA > META-INF/result.txt

Manifestdate

 

 

 

 

 

9 Responses to “Extend the Self Signing Certificate’date of jar-files in Forms11gRelease2”

  • Ekalipsoe says:

    I know that manually signing Oracle provided jar files is not supported. Could we do this for frmall.jar, webutil.jar etc and run forms without any problems?

    • admin says:

      Oracle recommands that for jar-files that begin with frm-letters, there is no need to sign them. But for other jar-files like webutil.jar, i think, it’s possible to sign it and then use it with no problem in forms. I will test it later.

  • Meena says:

    Hi,The oracle supplied frm*.jar files have definite expiry and in my case with 11.1.2.2 forms and reports it expires on Jan 2016. With hardly 6 months expiry, If I want to extend it for few more years what is the implication of removing the original signature and re-sign with self-sign with more years of expiry?1. If this is not recommended then how do we extend the expiry2. Subsequent patches/CPUs will it over-write frm*.jar causing cert errors?3. Do you know any patches that will fix this cert issue?Thank youMeena

    • admin says:

      Hi Meena,

      I think you cannot extend it for few more years.Java-plug-ins verify your jars, so, if you don’t have valide certificates,your jars shouldnot be used in your forms-applications.
      Thank you.

      Salem.

  • 97Xavier says:

    I must say you have hi quality posts here. Your website can go viral.

    You need initial boost only. How to get it? Search for; Etorofer’s strategies

  • janie says:

    Hi blogger, i must say you have high quality content here. Your page
    can go viral. You need initial traffic boost only.
    How to get it? Search for: make your content go viral
    Wrastain’s tools

  • Frost says:

    You completed some good points there. I did a search on the topic and found a good number of persons will consent with your blog.

  • Jetta says:

    Thanks for finally writing about >Extend the Self Signing Certificate’date of jar-files in Forms11gRelease2 | linecode-blog <Loved it!

  • Hung says:

    Thanks for finally writing about > Extend the Self Signing Certificate’date
    of jar-files in Forms11gRelease2 | linecode-blog < Loved it!

Leave a Reply