[DELTASPIKE-870] Partial Bean with signed jar trouble.

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.3.0
• Fix Version/s: 1.4.0
• Component/s: PartialBean
• Environment: Windows 7 64 bits; JDK 1.8.0_40 64bits
• Assignee: Thomas Andraschko
• Reporter: Charlee Chitsuk
• Created: 08/Apr/15 08:41
• Updated: 21/May/15 18:51
• Resolved: 09/Apr/15 05:59

Description

I've a utility jar which uses the partial beam for querying by using the JPA. This utility jar also has been signed by using the jar signer. Previously it works great with Apache DeltaSpike 1.2.1

Anyhow when I try to upgrade the Apache DeltaSpike to version 1.3.0 the system show me the exception as

Caused by: java.lang.SecurityException: class "some.package.PolicyFinder$$DSPartialBeanProxy"'s signer information does not match signer information of other classes in the same package

I also have a chance to ask via the user mailing list as [1]. Thomas Andraschko mentioned as the following: -

"AFAIR our old javassist proxies created the proxy class also in the same
package as the original jar.
Maybe the old proxy used another classloader or javassist reuses the
ProtectionDomain."

[1] http://mail-archives.apache.org/mod_mbox/deltaspike-users/201504.mbox/%3CCAFBJWv6WhZxZ6Q7ngsCwtBs_w9CqWea2sN5p2M75W1rW7oi%2BPg%40mail.gmail.com%3E