Extend the Self Signing Certificate’date of jar-files in Forms11gRelease2
Extend the Self Signing Certificate date of jar-files in Forms11gRelease2
Re-Sign Expired Jar-Files and Extend the Self Siging Certificate. réf Oracle (Doc ID 760815.1)
When you launch the java-control panel, you will see that the forms’certicate date is expired on july 6, 2013
Remove the old jar file’ signature of Self Signing Certificate
First, begin by setting some local environment variables, we will do the test on WindowsXp machine
set JAR_PATH=C:\Oracle\Middleware\Oracle_FRHome1\forms\java
set UNSIGN_JAR_PATH=C:\LineCode_Projects\UnsJar
set JAVA_PATH=C:\Oracle\Middleware\Oracle_FRHome1\jdk\bin
- Copy each jar file from your %JAR_PATH% into a new folder let’s say C:\LineCode_Projects\UnsJar
- Run the command : jar xf jarfilename.jar
# Remove the formsGraph.jar’ signature
Run the command : %JAVA_PATH%jar xf formsGraph.jar
This, will extract META-INF folder and com folder
- Remove the META-INF folder and the jar file
- Recreate your jar file by running the command jar -cvf jarfilename *.*
- copy the new jarfilename jar-file into your %JAVA_PATH% folder
# Read the MANIFEST.MF -file
type META-INF\MANIFEST.MF
Repeat the steps for each jar-file refrecend if your formsweb.cfg configuration file
# Forms applet archive setting for other clients (Sun Java Plugin, Appletviewer, etc)
archive=frmall.jar,FormsGraph.jar
Sign the jar-files and extend the expired self certificate referenced in the formsweb.cfg configuration file
Add the following environment variable to point the sign_webutil.bat script location
set FORMS_ORACLE_INSTANCE=C:\Oracle\Middleware\asinst_1
Edit your sign_webutil.bat-script and change the following values to generate new certificate.
Change the values as in the following example:
SET DN_CN=LineBCode Management
SET DN_OU=SalemBDevTools
SET DN_O=LineCodeBOracle
SET DN_C=CA
REM
REM Give your keystore file
SET KEYSTORE=”%HOMEDRIVE%%HOMEPATH%/.keystore”
REM
REM If KEYSTORE already exists, old KEYSTORE_PASSWORD for the keystore file must
REM be correctly given here. If KEYSTORE does not already exist, any password
REM given here will be taken for the new KEYSTORE file to be created.
REM
REM *** Remove the text after the ‘=’ below and replace with your password. ***
SET KEYSTORE_PASSWORD=yourpassword
REM
REM Give your alias key here.
REM
SET JAR_KEY=linecodeKey
REM
REM Key Password for the given key to be used for signing.
REM
REM *** Remove the text after the ‘=’ below and replace with your password. ***
SET JAR_KEY_PASSWORD=yourpassword
REM
REM Number of days before this certificate expires
REM
SET VALIDDAYS=2160
Issue to the following command to sign the specified JAR file.
cd %JAR_PATH%
%FORMS_ORACLE_INSTANCE%/bin/sign_webutil.bat jacob.jar
Verify the status the jar files.
# Run the following command
cd %JAR_PATH%
%JAVA_PATH%/jarsigner -verify appicons.jar
Verify the end date of the signed jar-files
Let’s extract the frmwebutil.jar into the %UNSIGN_JAR_PATH% folder
%JAVA_PATH%/jar xf frmwebutil.jar
# META-INF folder’s content
# Print the L_WEBUTI.DSA content
%JAVA_PATH%/keytool -printcert -file META-INF/L_WEBUTI.DSA > META-INF/result.txt
I know that manually signing Oracle provided jar files is not supported. Could we do this for frmall.jar, webutil.jar etc and run forms without any problems?
Oracle recommands that for jar-files that begin with frm-letters, there is no need to sign them. But for other jar-files like webutil.jar, i think, it’s possible to sign it and then use it with no problem in forms. I will test it later.
Hi,The oracle supplied frm*.jar files have definite expiry and in my case with 11.1.2.2 forms and reports it expires on Jan 2016. With hardly 6 months expiry, If I want to extend it for few more years what is the implication of removing the original signature and re-sign with self-sign with more years of expiry?1. If this is not recommended then how do we extend the expiry2. Subsequent patches/CPUs will it over-write frm*.jar causing cert errors?3. Do you know any patches that will fix this cert issue?Thank youMeena
Hi Meena,
I think you cannot extend it for few more years.Java-plug-ins verify your jars, so, if you don’t have valide certificates,your jars shouldnot be used in your forms-applications.
Thank you.
Salem.
I must say you have hi quality posts here. Your website can go viral.
You need initial boost only. How to get it? Search for; Etorofer’s strategies
Hi blogger, i must say you have high quality content here. Your page
can go viral. You need initial traffic boost only.
How to get it? Search for: make your content go viral
Wrastain’s tools
You completed some good points there. I did a search on the topic and found a good number of persons will consent with your blog.
Thanks for finally writing about >Extend the Self Signing Certificate’date of jar-files in Forms11gRelease2 | linecode-blog <Loved it!
Thanks for finally writing about > Extend the Self Signing Certificate’date
of jar-files in Forms11gRelease2 | linecode-blog < Loved it!