title: Can not verify rule set jar
body: <p>Another try to open a message here</p>
  
  <p>My company wants to use the deployment rule set for multiple java versions usage.</p>
  
  <p>Currenly we have 1.6.0_13, 1.7.0_51 and 1.8.0_66
  Java 8 is what selected in the System tab of the java control home
  User tab consists of java 6, 7 and 8</p>
  
  <p>all the settings in deployment.properties are default and point to correct locations or values</p>
  
  <p>env variables set
  java_home ="C:\Program Files (x86)\Java\jdk1.8.0_66\bin"
  path = set to correct locations</p>
  
  <p>The steps i followed are below,</p>
  
  <ol>
  <li><p>create the keystore
  keytool -genkey -dname "cn=drstest, ou=abac, o=mycompany, c=SE" -keyalg RSA -keysize 2048 -alias testsign -keypass password -keystore mykeystore.jks -storepass password -validity 1460</p></li>
  <li><p>downloaded the csr file
  keytool -certreq -alias testsign -file certreq.csr -keystore mykeystore.jks -storepass password</p></li>
  <li><p>Used the csr file and sent it to my company's CA for signing.</p></li>
  <li><p>Received two files: cer and p7b files from CA</p></li>
  <li><p>Import CSR reply:
  keytool -import -trustcacerts -file certnew.p7b -alias testsign -keystore mykeystore.jks -storepass password</p></li>
  <li><p>Downloaded and added required certificates of the chain in the keystore.</p></li>
  <li><p>created the ruleset.xml</p></li>
  <li><p>created the jar file using jar.exe
  jar.exe -cvf DeploymentRuleSet.jar ruleset.xml</p></li>
  <li><p>signed the jar file the keystore
  jarsigner -keystore mykeystore.jks DeploymentRuleSet.jar testsign</p></li>
  <li><p>added the time stamp
  jarsigner -verbose -keystore mykeystore.jks -storepass password -keypass password -tsa <a href="http://timestamp.comodoca.com/rfc3161" rel="nofollow noreferrer">http://timestamp.comodoca.com/rfc3161</a> DeploymentRuleSet.jar testsign -J-Dhttp.proxyHost=xxx.xxx.COM -J-Dhttp.proxyPort=8080</p></li>
  <li><p>Placed the DeploymentRuleSet.jar in the C:\Windows\Sun\Java\Deployment folder</p></li>
  </ol>
  
  <p>Now when i test using the java control home
  Control panel -> Java -> Security tab -> View active deployment rule set -> </p>
  
  <p>i get the message as 
  "DeploymentRuleset.jar is invalid"
  "Can not verify rule set jar"</p>
  
  <p>I can see my certificate in the "View Certificate details"</p>
  
  <p>Now i have spents so many hrs and have gone through so many webpages, and still dont know why it is invalid.</p>
  
  <p>This is not rocket science, but still i am stuck.</p>
  
  <p>Can some one point out where i am going wrong.</p>
  
  <p>********* i am not sure if there are any steps for cacerts file, if i have missed something for cacerts please guide me*************</p>
  
  <p>Regards</p>