Digital Signature Problem

[emrey]

Hi,

I have java project with media option "Single EXE Setup (Resource inside)".
At the digital signature panel, I am adding the EXE of my project to the signing list.
Building and installing stages are OK but when the application called I got the error

"mypackage/subpackage/MainClass main class could not be found"

If I don't add the EXE of my project to the signing list, everthing goes OK, but the EXE file is not signatured.

So, here is what i need:

- A single setup.exe file which includes everthing. > this is OK.
- setup.exe should be digital signatured. > this is OK.
- application.exe inside the setup.exe should be digital signatured. > this is OK BUT could not be launched. "main class could not be found error" occurs

What should I do?

Thanks a lot,

[Bogdan]

Hi,

This error appears when the java launcher is set to use an embedded JAR file, a limitation, option available in Java Products page.

I see in the aip file you sent by e-mail that you are embedding the JAR file, however when you do this we do not present the option to digitally sign the package.
Did you modified the project manually in a text editor and added this attribute?

The only solution to digitally sign the java launcher is to not use the JAR as embedded. You can add the JAR in Files and Folders page and then add it to the java launcher class path from Java Products page.

Best regards,
Bogdan

[emrey]

Hi,

Thank you for the response. We solved the problem with your guidance.
It would be better to add the jar inside of the EXE but we see that it is not possible in this condition.

It is possible to add EXE to signing list in spite of jar is embedded. We did not edit the configuration file. We always use the UI.

Our customer wants to sign setup.exe and application.exe without using any tool. (security issues)
It is possible sign setup.exe easily. Is there a way to sign application.exe without using advanced installer?
Is it possible to sign application.exe then add it to the setup.exe without breaking custom actions etc.?

Thanks a lot,

[Bogdan]

It is possible to add EXE to signing list in spite of jar is embedded. We did not edit the configuration file. We always use the UI.

On what OS are your running Advanced Installer, and what version of Advanced Installer are you using? This should not be possible with the latest version.

Is there a way to sign application.exe without using advanced installer?
Is it possible to sign application.exe then add it to the setup.exe without breaking custom actions etc.?

You could sign it before Advanced Installer builds the setup package, but if you choose to embed the JAR in it the digital signature would be broken, at build time in Advanced Installer,
because the EXE java launcher would change, therefore the signature would not be valid anymore.

As I said before, the only solution to sign it is to not embed the JAR in it.

Best regards,
Bogdan