Bouncycastle signer info does not match

Openfire Openfire Support
1

I tried upgrading my Openfire 3.8.2 install to 3.9.1 today. After doing all the upgrade steps and trying to start openfire it failed with the message in the nohup.out file of

Exception in thread “main” java.lang.ExceptionInInitializerError
at org.jivesoftware.openfire.spi.ConnectionManagerImpl.isClientSSLListenerEnabled( ConnectionManagerImpl.java:625)
…

…

Caused by: java.lang.SecurityException: class “org.bouncycastle.asn1.ASN1Primitive”'s signer information does not match signer information of other classes in the same package
…

…

I am using Sun JRE 1.6.0_43 on a CentOS box

2

Could you check the lib/ folder of your openfire install and make sure there aren’t two versions of bouncycastle inside of it?

daryl

3

In that directory I found:

-rw-r–r-- 1 jive jive 248366 Feb 6 16:39 bcpg-jdk15on.jar
-rw-r–r-- 1 jive jive 629662 Feb 6 16:39 bcpkix-jdk15on.jar
-rw-r–r-- 1 jive jive 2476362 Feb 6 16:39 bcprov-jdk15on.jar
-rw-r–r-- 1 jive jive 1815677 May 28 2013 bouncycastle.jar

I deleted the older bouncycastle.jar and now openfire runs.

The Upgrade Guide for tarball install say specifically to extract the new tar ball onto the existing install so if a deletion has to happnen like this, it should be documented.

Thanks

4

http://www.igniterealtime.org/builds/openfire/docs/latest/documentation/upgrade- guide.html

Right, the doc must be updated … I usually create a new dir and copy some files from ‘old’ to ‘new’.