* Observed Error

java.lang.SecurityException: class
"com.adaptiveplanning.ui.desktop.utility.AppletErrorLogger"'s signer
information does not match signer information of other classes in the
same package
at java.lang.ClassLoader.checkCerts(Unknown Source)
at java.lang.ClassLoader.preDefineClass(Unknown Source)
at java.lang.ClassLoader.defineClass(Unknown Source)
at java.security.SecureClassLoader.defineClass(Unknown Source)
at java.net.URLClassLoader.defineClass(Unknown Source)
at java.net.URLClassLoader.access$000(Unknown Source)
at java.net.URLClassLoader$1.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(Unknown Source)
at sun.applet.AppletClassLoader.findClass(Unknown Source)
at java.lang.ClassLoader.loadClass(Unknown Source)
at sun.applet.AppletClassLoader.loadClass(Unknown Source)
at java.lang.ClassLoader.loadClass(Unknown Source)
at java.lang.ClassLoader.loadClassInternal(Unknown Source)
at
com.adaptiveplanning.ui.desktop.aptreetable.APTreeTableApplet.doStart(AP
TreeTab leApplet.java:70)
at
com.adaptiveplanning.ui.desktop.utility.APBaseApplet.start(APBaseApplet.
java:53 )
at sun.applet.AppletPanel.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)


* Below is the jvm code excerpt which generates the error:

751     private synchronized void checkCerts(String name, CodeSource cs) {
752     int i = name.lastIndexOf('.');
753     String pname = (i == -1) ? "" : name.substring(0, i);

754     java.security.cert.Certificate[] pcerts =
755         (java.security.cert.Certificate[]) package2certs.get(pname);

756         if (pcerts == null) {

757             // first class in this package gets to define which
758             // certificates must be the same for all other classes
759             // in this package

760             if (cs != null) {
761                 pcerts = cs.getCertificates();
762             }
763             if (pcerts == null) {
764                 if (nocerts == null)
765                     nocerts = new java.security.cert.Certificate[0];
766                 pcerts = nocerts;
767             }
768             package2certs.put(pname, pcerts);
769         } else {
770             java.security.cert.Certificate[] certs = null;
771             if (cs != null) {
772                 certs = cs.getCertificates();
773             }
774

--> the certificate of the current class does not match the certificate
    recorded in the first class loaded from the same package


775             if (!compareCerts(pcerts, certs)) {
776                 throw new SecurityException("class \""+ name +
777                 "\"'s signer information does not match signer information of other classes in the same package");
778             }
779         }
780     }
781


*  It seems to be pointing to the fact that the AppletErrorLogger class is
signed with a different cert as the first class in the same package
com.adaptiveplanning.ui.desktop.utility.

But CU claimed that all classes is signed with the same cert:

sm      3047 Wed Jan 28 15:49:34 PST 2009 com/adaptiveplanning/ui/desktop/utility/AppletErrorLogger.class

      X.509, CN="Adaptive Planning, Inc.", OU=Digital ID Class 3 - Java Object Signing, O="Adaptive Planning, Inc.", L=Mountain View, ST=California, C=US
      [certificate will expire on 8/3/09 4:59 PM]
      X.509, CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
      [certificate is valid from 7/15/04 5:00 PM to 7/15/14 4:59 PM]
      X.509, OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US
      [certificate is valid from 1/28/96 4:00 PM to 8/1/28 4:59 PM]


sm      1112 Wed Jan 28 15:49:32 PST 2009 com/adaptiveplanning/ui/desktop/utility/APBaseApplet$1.class
       X.509, CN="Adaptive Planning, Inc.", OU=Digital ID Class 3 - Java Object Signing, O="Adaptive Planning, Inc.", L=Mountain View, ST=California, C=US       [certificate will expire on 8/3/09 4:59 PM]
      X.509, CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US       [certificate is valid from 7/15/04 5:00 PM to 7/15/14 4:59 PM]
      X.509, OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US       [certificate is valid from 1/28/96 4:00 PM to 8/1/28 4:59 PM]


Attached is the full output from jarsigner and the jar file.