Java安全异常BIRT和Apache POI哈克 [英] Java Security Exception BIRT and Apache POI Hack
问题描述
我收到一个
java.lang.SecurityException: class "org.apache.poi.POIXMLDocument"'s signer information does not match signer information of other classes in the same package
如本BIRT描述的BIRT核心罐子和一个Apache POI罐子，之间bug报告。
它已经在bug报告中指出，这可以通过升级BIRT是固定的，但是当我做，我碰到另一个运行时错误，这只能在降级来解决。因此，它代表我在这里咸菜一点点。 这一评论说，我应该能够解压缩的Apache POI罐子，删除安全信息（有没有在BIRT清单），然后重新压缩它，我应该好走，但是当我删除使用Apache POI不再编译，它仿佛POI依赖不再存在（是的，它是类路径的安全信息，我的code ）。另外我也越来越从我的AspectJ织入抛出的异常。
It has been stated in the bug report that this can be fixed by upgrading BIRT, however when I do that I run into another runtime bug which can only be solved by downgrading. Thus, as it stands I am in a little bit of a pickle here. This comment says that I should be able to unzip the apache poi jar, delete the security information (there is none in the BIRT manifest), then rezip it and I should be good to go, however when I delete the security information my code that uses apache poi no longer compiles, its as if the poi dependency no longer exists (yes it is on the classpath). In addition i'm also getting an exception thrown from my aspectj weaver.
下面是META-INF / MANIFEST.MF：
Here is the META-INF/MANIFEST.MF:
在（删节，SNIPPIT）
before (abridged, snippit)
Manifest-Version: 1.0
Bundle-ClassPath: .
Bundle-Vendor: Eclipse Orbit
Bundle-Name: Apache POI
Bundle-SymbolicName: org.apache.poi
Eclipse-SourceReferences: scm:cvs:pserver:dev.eclipse.org:/cvsroot/too
ls:org.eclipse.orbit/org.apache.poi;tag=v201303080712
Export-Package: org.apache.poi,org.apache.poi.common.usermodel,org.apa
che.poi.ddf,org.apache.poi.dev,org.apache.poi.hpsf,org.apache.poi.hps
f.extractor,org.apache.poi.hpsf.wellknown,org.apache.poi.hssf,org.apa
che.poi.hssf.dev,org.apache.poi.hssf.eventmodel,org.apache.poi.hssf.e
ventusermodel,org.apache.poi.hssf.eventusermodel.dummyrecord,org.apac
he.poi.hssf.extractor,org.apache.poi.hssf.model,org.apache.poi.hssf.r
ecord,org.apache.poi.hssf.record.aggregates,org.apache.poi.hssf.recor
d.cf,org.apache.poi.hssf.record.chart,org.apache.poi.hssf.record.comm
on,org.apache.poi.hssf.record.cont,org.apache.poi.hssf.record.crypto,
org.apache.poi.hssf.record.pivottable,org.apache.poi.hssf.usermodel,o
rg.apache.poi.hssf.util,org.apache.poi.poifs.common,org.apache.poi.po
ifs.crypt,org.apache.poi.poifs.dev,org.apache.poi.poifs.eventfilesyst
em,org.apache.poi.poifs.filesystem,org.apache.poi.poifs.nio,org.apach
e.poi.poifs.property,org.apache.poi.poifs.storage,org.apache.poi.ss,o
rg.apache.poi.ss.extractor,org.apache.poi.ss.format,org.apache.poi.ss
.formula,org.apache.poi.ss.formula.atp,org.apache.poi.ss.formula.cons
tant,org.apache.poi.ss.formula.eval,org.apache.poi.ss.formula.eval.fo
rked,org.apache.poi.ss.formula.function,org.apache.poi.ss.formula.fun
ctions,org.apache.poi.ss.formula.ptg,org.apache.poi.ss.formula.udf,or
g.apache.poi.ss.usermodel,org.apache.poi.ss.usermodel.charts,org.apac
he.poi.ss.util,org.apache.poi.ss.util.cellwalk,org.apache.poi.util
Bundle-Version: 3.9.0.v201303080712
Bundle-ManifestVersion: 2
Name: org/apache/poi/ss/formula/functions/AggregateFunction$5.class
SHA1-Digest: 5RrBJbQIbv6B9uMzek3j1oKz6M8=
Name: org/apache/poi/ss/usermodel/charts/AxisCrosses.class
SHA1-Digest: ipQ9+pxjWLkgUu7+oqv0Yehyggw=
Name: org/apache/poi/hssf/usermodel/HSSFSheet.class
SHA1-Digest: ScBV1zHQgPkl9+/wIKAG4fJQXCo=
Name: org/apache/poi/hssf/record/HyperlinkRecord$GUID.class
SHA1-Digest: 3kpDbR6WINPRF24HCT7qOrhKnE4=
Name: org/apache/poi/poifs/storage/RawDataBlockList.class
SHA1-Digest: RHoYWrfErxUXOgVH4A9IDEXcx6c=
Name: META-INF/LICENSE
SHA1-Digest: skDsOhroUOXZROozPxPxBGVNGv4=
Name: org/apache/poi/ss/util/DateFormatConverter.class
SHA1-Digest: LKE6cGcKD20qFWR7++gAw1YMZ7s=
... a lot more of this SHA1-Digest stuff
在（删节，完整的文件）：
After (unabridged, full file):
Manifest-Version: 1.0
Bundle-ClassPath: .
Bundle-Vendor: Eclipse Orbit
Bundle-Name: Apache POI
Bundle-SymbolicName: org.apache.poi
Eclipse-SourceReferences: scm:cvs:pserver:dev.eclipse.org:/cvsroot/too
ls:org.eclipse.orbit/org.apache.poi;tag=v201303080712
Export-Package: org.apache.poi,org.apache.poi.common.usermodel,org.apa
che.poi.ddf,org.apache.poi.dev,org.apache.poi.hpsf,org.apache.poi.hps
f.extractor,org.apache.poi.hpsf.wellknown,org.apache.poi.hssf,org.apa
che.poi.hssf.dev,org.apache.poi.hssf.eventmodel,org.apache.poi.hssf.e
ventusermodel,org.apache.poi.hssf.eventusermodel.dummyrecord,org.apac
he.poi.hssf.extractor,org.apache.poi.hssf.model,org.apache.poi.hssf.r
ecord,org.apache.poi.hssf.record.aggregates,org.apache.poi.hssf.recor
d.cf,org.apache.poi.hssf.record.chart,org.apache.poi.hssf.record.comm
on,org.apache.poi.hssf.record.cont,org.apache.poi.hssf.record.crypto,
org.apache.poi.hssf.record.pivottable,org.apache.poi.hssf.usermodel,o
rg.apache.poi.hssf.util,org.apache.poi.poifs.common,org.apache.poi.po
ifs.crypt,org.apache.poi.poifs.dev,org.apache.poi.poifs.eventfilesyst
em,org.apache.poi.poifs.filesystem,org.apache.poi.poifs.nio,org.apach
e.poi.poifs.property,org.apache.poi.poifs.storage,org.apache.poi.ss,o
rg.apache.poi.ss.extractor,org.apache.poi.ss.format,org.apache.poi.ss
.formula,org.apache.poi.ss.formula.atp,org.apache.poi.ss.formula.cons
tant,org.apache.poi.ss.formula.eval,org.apache.poi.ss.formula.eval.fo
rked,org.apache.poi.ss.formula.function,org.apache.poi.ss.formula.fun
ctions,org.apache.poi.ss.formula.ptg,org.apache.poi.ss.formula.udf,or
g.apache.poi.ss.usermodel,org.apache.poi.ss.usermodel.charts,org.apac
he.poi.ss.util,org.apache.poi.ss.util.cellwalk,org.apache.poi.util
Bundle-Version: 3.9.0.v201303080712
Bundle-ManifestVersion: 2
正如你所看到的，我删除了所有的安全信息。难道我一路上错了吗？这是我的问题一个有效的解决方案？
As you can see, I deleted all the security information. Did I do something wrong along the way? Is this a valid solution for my problem?
推荐答案
我在META-INF删除一些文件，并rezipping的文件夹和重命名它罐子是不够的，我需要真正创建与此命令的jar：
I had to delete a few files in META-INF and also rezipping the folder and renaming it to jar is not enough, I needed to actually create the jar with this command:
jar cvf org.apache.poi_3.9.0.v201303080712.jar .
这篇关于Java安全异常BIRT和Apache POI哈克的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
