{"id":8937,"date":"2017-05-04T13:27:30","date_gmt":"2017-05-04T17:27:30","guid":{"rendered":"https:\/\/pitss.org\/us\/?p=8937"},"modified":"2018-05-22T12:56:53","modified_gmt":"2018-05-22T16:56:53","slug":"running-oracle-forms-md5-signed-jar-files-warning","status":"publish","type":"post","link":"https:\/\/pitss.org\/us\/2017\/05\/04\/running-oracle-forms-md5-signed-jar-files-warning\/","title":{"rendered":"Running Oracle Forms MD5-Signed Jar Files Warning"},"content":{"rendered":"

[et_pb_section fb_built=”1″ admin_label=”section” _builder_version=”3.0.51″ custom_padding=”0px||50px|”][et_pb_row custom_padding=”0px|||” admin_label=”Row” _builder_version=”3.3.1″ background_size=”initial” background_position=”top_left” background_repeat=”repeat”][et_pb_column type=”4_4″ _builder_version=”3.0.47″ parallax=”off” parallax_method=”on”][et_pb_text admin_label=”Text” _builder_version=”3.0.106″ custom_margin=”||30px|”]<\/p>\n

Beginning April 18, 2017, Oracle now considers any jar files signed with MD5 to be unsigned due to the security vulnerabilities with MD5 signatures.<\/span><\/p>\n

[\/et_pb_text][et_pb_divider color=”#e2e2e2″ divider_position=”center” disabled_on=”on|on|off” admin_label=”Divider” _builder_version=”3.2″ custom_css_main_element=”margin-bottom:30px !important;”][\/et_pb_divider][et_pb_text admin_label=”Text” _builder_version=”3.0.51″ custom_margin=”||30px|”]<\/p>\n

What you’ll learn in this article:<\/strong><\/h3>\n

\u2713<\/strong>\u00a0Which jar files will be blocked with the new Java update
\u2713<\/strong>\u00a0<\/span>How to unblock custom jar files
<\/span>\u2713<\/strong>\u00a0<\/span>What warnings you will receive from Oracle Forms
<\/span>\u2713<\/strong>\u00a0Steps to apply the appropriate patches<\/span><\/p>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row custom_padding=”40px|40px|30px|40px” background_position_1=”top_left” background_repeat_1=”no-repeat” admin_label=”Row” _builder_version=”3.0.51″ background_color=”#006bb3″][et_pb_column type=”4_4″ _builder_version=”3.0.47″ parallax=”off” parallax_method=”on” background_position=”top_left” background_repeat=”no-repeat”][et_pb_text admin_label=”Text” _builder_version=”3.0.106″ background_color=”#006bb3″ background_layout=”dark”]<\/p>\n

Fill out the form below to access this blog post.<\/strong><\/h2>\n

[\/et_pb_text][et_pb_code admin_label=”Code” module_class=”white-text” _builder_version=”3.3.1″][ninja_form id=38][\/et_pb_code][\/et_pb_column][\/et_pb_row][et_pb_row custom_padding=”0px||0px|” custom_margin=”30px||30px|” background_position_1=”top_left” background_repeat_1=”no-repeat” _builder_version=”3.3.1″][et_pb_column type=”4_4″ _builder_version=”3.0.47″ parallax=”off” parallax_method=”on” background_position=”top_left” background_repeat=”no-repeat”][et_pb_cta title=”Need help with your legacy software?” button_url=”https:\/\/pitss.org\/solutions\/full-service-development\/” button_text=”LEGACY SOFTWARE DEVELOPMENT” _builder_version=”3.0.52″ background_color=”#222222″ custom_button=”on” button_font=”Abel|||on|” text_orientation=”left” custom_padding=”45px|50px|45px|50px” border_style=”solid”]Don’t settle for outdated software. Rely on an expert full-stack software development team to help modernize your legacy systems.
\n[\/et_pb_cta][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"

Beginning April 18, 2017, Oracle now considers any jar files signed with MD5 to be unsigned due to the security vulnerabilities with MD5 signatures.What you’ll learn in this article: \u2713\u00a0Which jar files will be blocked with the new Java update \u2713\u00a0How to unblock custom jar files \u2713\u00a0What warnings you will receive from Oracle Forms \u2713\u00a0Steps […]<\/p>\n","protected":false},"author":5,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"

Beginning April 18, 2017, Oracle now considers any jar files signed with MD5 to be unsigned due to the security vulnerabilities with MD5 signatures. Starting with Java Runtime Environment (JRE) 1.8.0_131 (Java 8 Update 131), when it is used for running Oracle Forms (all versions), any jar files signed with MD5 will be blocked:<\/p>

\"\"<\/a><\/p>

More information from Oracle on this may be found at https:\/\/blogs.oracle.com\/java-platform-group\/oracle-jre-will-no-longer-trust-md5-signed-code-by-default<\/a>.<\/p>

For any of your custom jar files, they will need to be re-signed without MD5 (MD5withRSA). It is recommended to use SHA-256 (or SHA-2).<\/p>

As for the jar files which come installed with Oracle Forms (frmall.jar, frmwebutil.jar, etc.), if you are using Forms 12c (12.2.1.0.0 or higher), you will have no problem running the application because the jar files are not signed with MD5. However, if you are running Oracle Forms 11gR2 or older (including 11.1.2.2.0), you will get this warning upon launching your application which will result in the application not launching at all. To fix this problem, you will have the following options to choose from:<\/p>