Hi,
We have our application setup in the below environment
Tomcat version 8.5.35
Operating system RHEL 7.4
When we do not enable the JAVA security policy, we get the following parser
loaded and the application works fine.
com.sun.org.apache.xerces.internal.jaxp.DocumentBuilderImpl
After enabling security in the same environemtn the following getting loaded.
org.apache.xerces.jaxp.DocumentBuilderImpl
The error message in the log files are .
java.lang.VerifyError: class
com.sun.org.apache.xerces.internal.parsers.XML11Configuration overrides final
method getFeature.(Ljava/lang/String;)Z
at java.lang.ClassLoader.defineClass1(Native Method)
at java.lang.ClassLoader.defineClass(ClassLoader.java:763)
at
java.security.SecureClassLoader.defineClass(SecureClassLoader.java:142)
at
org.apache.catalina.loader.WebappClassLoaderBase.findClassInternal(WebappClassLoaderBase.java:2356)
at
org.apache.catalina.loader.WebappClassLoaderBase$PrivilegedFindClassByName.run(WebappClassLoaderBase.java:156)
at
org.apache.catalina.loader.WebappClassLoaderBase$PrivilegedFindClassByName.run(WebappClassLoaderBase.java:145)
at java.security.AccessController.doPrivileged(Native Method)
at
org.apache.catalina.loader.WebappClassLoaderBase.findClass(WebappClassLoaderBase.java:828)
at
org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1297)
at
org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1156)
at
com.sun.org.apache.xerces.internal.parsers.DOMParser.<init>(DOMParser.java:152)
at
com.sun.org.apache.xerces.internal.parsers.DOMParser.<init>(DOMParser.java:132)
at
com.sun.org.apache.xerces.internal.jaxp.DocumentBuilderImpl.<init>(DocumentBuilderImpl.java:99)
at
com.sun.org.apache.xerces.internal.jaxp.DocumentBuilderFactoryImpl.newDocumentBuilder(DocumentBuilderFactoryImpl.java:90)
How to make the application work with the security enabled mode
Thanks
Mohan
DISCLAIMER: This communication contains information which is confidential and
the copyright of Ramco Systems Ltd, its subsidiaries or a third party
("Ramco"). This email may also contain legally privileged information.
Confidentiality and legal privilege attached to this communication are not
waived or lost by reason of mistaken delivery to you.This email is intended to
be read or used by the addressee only. If you are not the intended recipient,
any use, distribution, disclosure or copying of this email is strictly
prohibited without the express written approval of Ramco. Please delete and
destroy all copies and email Ramco at [email protected] immediately. Any views
expressed in this communication are those of the individual sender, except
where the sender specifically states them to be the views of Ramco. Except as
required by law, Ramco does not represent, warrant and/or guarantee that the
integrity of this communication has been maintained nor that the communication
is free of errors, virus, interception or interference. If you do not wish to
receive such communications, please forward this communication to
[email protected] and express your wish not to receive such communications
henceforth.
