getdown couldn't verify the application's digital signature

[Luca Bonaldo]

Hello,

I' building a getdown project, but is not work..
Result error messagge:

In example the applet mode your writen :

<taskdef name="digest" classname="com.threerings.getdown.tools.DigesterTask"
         classpathref="getdown.classpath"/>
<property file="certificate.properties"/>
<digest appdir="${app_dir}" keystore="${sign.keystore}" storepass="${sign.storepass}"
        alias="${sign.alias}"/>

what's to reference ${app_dir} ?
can someone help me?

The code of applet and getdown.txt is here:

https://www.dropbox.com/sh/jksfh636yscgkjs/dGNLZsBvXz

[Michael Bayne]

On Thu, Apr 4, 2013 at 1:31 AM, Luca Bonaldo <in...@lucabonaldo.it> wrote:

what's to reference ${app_dir} ?
can someone help me?

app_dir is the directory in which you are building your application.

The snippet of XML is for your Ant build file.

-- m...@samskivert.com

[Luca Bonaldo]

Thanks,
but this project not work,this project not work, java's console get output:

network: Eseguire la disconnessione da http://www.bonny85.altervista.org/client/STile/digest.txt.sig

2013/04/08 16:22:26:351 INFO g.a: Signature does not match [cert=Sun RSA public key, 2048 bits

  modulus: 19579...

  public exponent: 65537]

2013/04/08 16:22:26:351 WARNING g.a: getdown() failed.

java.io.IOException: m.corrupt_digest_signature_error

at com.threerings.getdown.a.e.a(Unknown Source)

at com.threerings.getdown.a.e.p(Unknown Source)

at com.threerings.getdown.a.e.b(Unknown Source)

at com.threerings.getdown.launcher.Getdown.run(Unknown Source)

2013/04/08 16:22:26:352 INFO g.a: Releasing lock

Applet code:

            <taskdef name="digest" classname="com.threerings.getdown.tools.DigesterTask" classpath="getdown-tools.jar" />

    

            <property file="certificate.properties"/>

            <digest appdir="${app_dir}" keystore="${sign.keystore}" alias="${sign.alias}" storepass="${sign.storepass}/>

            <signjar keystore="${sign.keystore}" alias="${sign.alias}" storepass="${sign.storepass}">

                   <fileset dir="${app_dir}" includes="getdown-client.jar"/>

            </signjar>

certificate.properties:

sign.keystore=STile_keystore/keystore.jks

sign.storepass=*****

sign.alias=bonny

these files are organized on this mode:

www.bonny85.altervista.org/

    client/

          STile/

                 getdown.txt

                 getdown-client.jar

                 digest.txt

                 digest.txt.sig

                 lib/...

                 native/....

           applet.html

           certificate.properties

           getdown-tools.jar

           STile_keystore/

                         keystore.jks

i signed files with the keystore keystore.jks .

i not understand where is the problem...

the applet not find the keystore, i'm thinking this.

[Michael Bayne]

On Mon, Apr 8, 2013 at 7:47 AM, Luca Bonaldo <in...@lucabonaldo.it> wrote:

Applet code:

            <taskdef name="digest" classname="com.threerings.getdown.tools.DigesterTask" classpath="getdown-tools.jar" />

    

            <property file="certificate.properties"/>

            <digest appdir="${app_dir}" keystore="${sign.keystore}" alias="${sign.alias}" storepass="${sign.storepass}/>

            <signjar keystore="${sign.keystore}" alias="${sign.alias}" storepass="${sign.storepass}">

                   <fileset dir="${app_dir}" includes="getdown-client.jar"/>

            </signjar>

I assume you mean "Ant code" not "Applet code", those are Ant build file commands and have nothing to do with the <applet> tag.

certificate.properties:

sign.keystore=STile_keystore/keystore.jks

sign.storepass=*****

sign.alias=bonny

these files are organized on this mode:

www.bonny85.altervista.org/

    client/

          STile/

                 getdown.txt

                 getdown-client.jar

                 digest.txt

                 digest.txt.sig

                 lib/...

                 native/....

           applet.html

           certificate.properties

           getdown-tools.jar

           STile_keystore/

                         keystore.jks

i signed files with the keystore keystore.jks .

i not understand where is the problem...

the applet not find the keystore, i'm thinking this.

I think you may be confused at how things work.

The applet does not need to read the keystore, and indeed it should not be on your web server where anyone can download it.

You just sign your getdown-client.jar file and you generate the digest.txt.sig file and those are the only things that are needed for signed applet mode.

The Ant commands you have above look correct for signing the getdown-client.jar and for generating digest.txt.sig.

I tried looking at your applet.html file but your server returns 404 when I try to fetch it. Are you sure something isn't wrong there?

-- m...@samskivert.com