Discovery does not support Code Signing - Known Error

Discovery does not support Code Signing Description "Shazzam" sensors are not supported when Code Signing is turned on but they are required as part of the expected functionality of code signing.

The next exception is found in the logs is found if there is any attempt to implement the functionality with tables discovery_sensors, discovery_probe_parameter and discovery_probes

Cannot just-in-time load the signature record: Couldn't find pluginId for documentId: b11360600a0a0ba500c41bcbae55c5c4 with signatureRecordSysId: 0a050da7b880493083fe4b17a4788110 : no thrown error *** Script: false

Steps to Reproduce

Pre-req:Install CSE plugin 1.Login to application-->code signing configuration page-->upload certificates in TNPI 2. Use Shazzam discovery sensor

You will get similar logs as below 2024-09-19 00:42:22 (537) worker.5 worker.5 txid=4cf61e6c3bb0 JobExecutor Completed: ASYNC: Discovery - Sensors wmi,snmp,ssh,http,wins,dns,slp,wbem,vmapp,winrm,winrm in 0:00:00.676, next occurrence is null, id=88f65e6c3bb01a10c8c7944a85e45a23 tr=0 pr=105 re=0 po=1726731741 la=0.857 2024-09-19 00:42:22 (500) worker.5 worker.5 txid=4cf61e6c3bb0 SSI_78dfb2dd536002001f175f43911c087d (170989)SensorProcessor - Processed sensors: Shazzam [0cf65e6c3bb01a10c8c7944a85e45a22] (See Payload) in 2024-09-19 00:42:22 (494) worker.5 worker.5 txid=4cf61e6c3bb0 SSI_cea19a970ab3015300f10bda87362122 DEBUG: Probe.createWithoutReassignment-> ecc output id: dcf65e6c3bb01a10c8c7944a85e45a4f 2024-09-19 00:42:22 (493) worker.5 worker.5 txid=4cf61e6c3bb0 SSI_cea19a970ab3015300f10bda87362122 [0:00:00.334] DBAction Slow evaluation for IDBListener on table: ecc_queue0006 2024-09-19 00:42:22 (493) worker.5 worker.5 txid=4cf61e6c3bb0 SSI_cea19a970ab3015300f10bda87362122 [AMB] AMBQueue channel_id=/mid/server/10e51ac23b7fca90c8c7944a85e45ab9 Published amb message, sys_id: 50f65e6c3bb01a10c8c7944a85e45a64, length: 166 2024-09-19 00:42:22 (490) worker.5 worker.5 txid=4cf61e6c3bb0 SSI_cea19a970ab3015300f10bda87362122 [0:00:00.332] DBAction Slow listener: CodeSigningDBListener on ecc_queue0006 2024-09-19 00:42:22 (489) worker.5 worker.5 txid=4cf61e6c3bb0 SSI_cea19a970ab3015300f10bda87362122 WARNING *** WARNING *** Code Signing: Code Signing Validation Failed: TABLE=discovery_sensor, SYS_ID=0fe358250ab301500026926821fe5cac, PURPOSE=ecc_queue, STATUS=UNTRUSTED 2024-09-19 00:42:22 (481) worker.5 worker.5 txid=4cf61e6c3bb0 SSI_cea19a970ab3015300f10bda87362122 WARNING *** WARNING *** Could not check for certificate [KMFCoreCertificate[xxxxxx]] revocation status using any method; assuming GOOD 2024-09-19 00:42:22 (481) worker.5 worker.5 txid=4cf61e6c3bb0 SSI_cea19a970ab3015300f10bda87362122 WARNING *** WARNING *** Inconclusive revocation status for certificate [KMFCoreCertificate[xxxxx]] using method: CRL 2024-09-19 00:42:22 (480) worker.5 worker.5 txid=4cf61e6c3bb0 SSI_cea19a970ab3015300f10bda87362122 SEVERE *** ERROR *** Could not fetch certificate [KMFCoreCertificate[xxxx]] CRL at URL 2024-09-19 00:42:22 (428) worker.5 worker.5 txid=4cf61e6c3bb0 SSI_cea19a970ab3015300f10bda87362122 WARNING *** WARNING *** Unexpected URI in certificate [KMFCoreCertificate[xxx]] CRL Distribution point list: 2024-09-19 00:42:22 (427) worker.5 worker.5 txid=4cf61e6c3bb0 SSI_cea19a970ab3015300f10bda87362122 WARNING *** WARNING *** Unrecognized attribute in X.500 name: 0.9.2342.19200300.100.1.25 2024-09-19 00:42:22 (426) worker.5 worker.5 txid=4cf61e6c3bb0 SSI_cea19a970ab3015300f10bda87362122 WARNING *** WARNING *** Unrecognized attribute in X.500 name: 0.9.2342.19200300.100.1.25 2024-09-19 00:42:22 (426) worker.5 worker.5 txid=4 Unrecognized attribute in X.500 name: 0.9.2342.19200300.100.1.25 2024-09-19 00:42:22 (265) worker.5 worker.5 txid=4cf61e6c3bb0 SSI_cea19a970ab3015300f10bda87362122 WARNING *** WARNING *** Unrecognized attribute in X.500 name: 0.9.2342.19200300.100.1.25 2024-09-19 00:42:22 (265) worker.5 worker.5 txid=4cf61e6c3bb0 SSI_cea19a970ab3015300f10bda87362122 WARNING *** WARNING *** Unrecognized attribute in X.500 name: 0.9.2342.19200300.100.1.25 2024-09-19 00:42:22 (264) worker.5 worker.5 txid=4cf61e6c3bb0 SSI_cea19a970ab3015300f10bda87362122 WARNING *** WARNING *** Unrecognized attribute in X.500 name: 1.2.840.113549.1.9.1 2024-09-19 00:42:22 (256) worker.5 worker.5 txid=4cf61e6c3bb0 SSI_cea19a970ab3015300f10bda87362122 WARNING *** WARNING *** Unrecognized attribute in X.500 name: 0.9.2342.19200300.100.1.25 2024-09-19 00:42:22 (256) worker.5 worker.5 txid=4cf61e6c3bb0 SSI_cea19a970ab3015300f10bda87362122 WARNING *** WARNING *** Unrecognized attribute in X.500 name: 0.9.2342.19200300.100.1.25 2024-09-19 00:42:22 (255) worker.5 worker.5 txid=4cf61e6c3bb0 SSI_cea19a970ab3015300f10bda87362122 WARNING *** WARNING *** Unrecognized attribute in X.500 name: 0.9.2342.19200300.100.1.25 2024-09-19 00:42:22 (255) worker.5 worker.5 txid=4cf61e6c3bb0 SSI_cea19a970ab3015300f10bda87362122 WARNING *** WARNING *** Unrecognized attribute in X.500 name: 1.2.840.113549.1.9.1 2024-09-19 00:42:22 (252) worker.5 worker.5 txid=4cf61e6c3bb0 SSI_cea19a970ab3015300f10bda87362122 SEVERE *** ERROR *** Cannot just-in-time load the signature record: Couldn't find pluginId for documentId: 0fe358250ab301500026926821fe5cac with signatureRecordSysId: 84390bf184eb4dd9a3484ad4e9cc71c1 com.glide.codesigning.exception.CodeSigningException: Cannot just-in-time load the signature record: Couldn't find pluginId for documentId: 0fe358250ab301500026926821fe5cac with signatureRecordSysId: 84390bf184eb4dd9a3484ad4e9cc71c1 at com.glide.codesigning.output.JustInTimeLoadingEngine.loadSignatureRecordJustInTime(JustInTimeLoadingEngine.java:89) at com.glide.codesigning.output.CodeSigningOutputUtility.getCodeSigningRecordGRUsingFields(CodeSigningOutputUtility.java:151) at com.glide.codesigning.output.CodeSigningOutputUtility.getCodeSigningRecordFromUniqueIndex(CodeSigningOutputUtility.java:66) at com.glide.codesigning.utility.CodeSigningUtility.verify(CodeSigningUtility.java:380) at com.glide.codesigning.service.CodeSigningGlideTrustService.isTrusted(CodeSigningGlideTrustService.java:51) at com.glide.codesigning.tracking.CodeSigningNode.getValidationStatus(CodeSigningNode.java:81) at com.glide.codesigning.tracking.CodeSigningNode.validateSignatureUsingCrossTransactionalCache(CodeSigningNode.java:60) at com.glide.codesigning.tracking.CodeSigningNode.validateSignature(CodeSigningNode.java:48) at com.glide.codesigning.tracking.CodeSigningTrackerContext.validateScriptSourceSignatures(CodeSigningTrackerContext.java:31) at com.glide.codesigning.tracking.CodeSigningTracker.validateScripts(CodeSigningTracker.java:160) at com.glide.codesigning.tracking.CodeSigningDBListener.validateScripts(CodeSigningDBListener.java:281) at com.glide.codesigning.tracking.CodeSigningDBListener.notarizeECCQueue(CodeSigningDBListener.java:155) at com.glide.codesigning.tracking.CodeSigningDBListener.onExecute(CodeSigningDBListener.java:128) at com.glide.db.DBAction.processListeners(DBAction.java:296) at com.glide.db.DBAction.executeAndReturnException(DBAction.java:349) at com.glide.script.GlideRecordITable.insert(GlideRecordITable.java:191) at com.glide.script.NonCancelableAuditExecutor.doOperation(NonCancelableAuditExecutor.java:80) at com.glide.script.GlideRecord.insert(GlideRecord.java:5373) at com.glide.script.GlideRecord.insert(GlideRecord.java:5278) at com.snc.core_automation.Probe.createWithoutReassignment(Probe.java:978) at com.snc.core_automation.Probe.createForMidServer(Probe.java:1013) at com.snc.core_automation.Probe.createEx(Probe.java:905) at com.snc.core_automation.Probe.create(Probe.java:847) at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:77) at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.base/java.lang.reflect.Method.invoke(Method.java:569) at org.mozilla.javascript.MemberBox.invoke(MemberBox.java:228) at org.mozilla.javascript.NativeJavaMethod.call(NativeJavaMethod.java:294) at org.mozilla.javascript.ScriptRuntime.doCall(ScriptRuntime.java:2991) at org.mozilla.javascript.Interpreter.interpretLoop(Interpreter.java:1928) at org.mozilla.javascript.Interpreter.interpret(Interpreter.java:1112) at org.mozilla.javascript.InterpretedFunction.lambda$call$0(InterpretedFunction.java:161) at com.glide.caller.gen.sys_script_include_cea19a970ab3015300f10bda87362122_script.call(Unknown Source) at com.glide.script.ScriptCaller.call(ScriptCaller.java:22) at org.mozilla.javascript.InterpretedFunction.call(InterpretedFunction.java:160) at org.mozilla.javascript.ScriptRuntime.doCall2(ScriptRuntime.java:3086) at org.mozilla.javascript.ScriptRuntime.doCall(ScriptRuntime.java:2998) at org.mozilla.javascript.Interpreter.interpretLoop(Interpreter.java:1928) at org.mozilla.javascript.Interpreter.interpret(Interpreter.java:1112) at org.mozilla.javascript.InterpretedFunction.lambda$call$0(InterpretedFunction.java:161) at com.glide.caller.gen.sys_script_include_cea19a970ab3015300f10bda87362122_script.call(Unknown Source) at com.glide.script.ScriptCaller.call(ScriptCaller.java:22) at org.mozilla.javascript.InterpretedFunction.call(InterpretedFunction.java:160) at org.mozilla.javascript.ScriptRuntime.doCall2(ScriptRuntime.java:3086) at org.mozilla.javascript.ScriptRuntime.doCall(ScriptRuntime.java:2998) at org.mozilla.javascript.Interpreter.interpretLoop(Interpreter.java:1928) at org.mozilla.javascript.Interpreter.interpret(Interpreter.java:1112) at org.mozilla.javascript.InterpretedFunction.lambda$call$0(InterpretedFunction.java:161) at com.glide.caller.gen.discovery_sensor_0fe358250ab301500026926821fe5cac.call(Unknown Source) at com.glide.script.ScriptCaller.call(ScriptCaller.java:22) at org.mozilla.javascript.InterpretedFunction.call(InterpretedFunction.java:160) at org.mozilla.javascript.ScriptRuntime.doCall2(ScriptRuntime.java:3086) at org.mozilla.javascript.ScriptRuntime.doCall(ScriptRuntime.java:2998) at org.mozilla.javascript.Interpreter.interpretLoop(Interpreter.java:1928) at org.mozilla.javascript.Interpreter.interpret(Interpreter.java:1112) at org.mozilla.javascript.InterpretedFunction.lambda$call$0(InterpretedFunction.java:161) at com.glide.caller.gen.discovery_sensor_0fe358250ab301500026926821fe5cac.call(Unknown Source) at com.glide.script.ScriptCaller.call(ScriptCaller.java:22) at org.mozilla.javascript.InterpretedFunction.call(InterpretedFunction.java:160) at org.mozilla.javascript.ScriptRuntime.doCall2(ScriptRuntime.java:3086) at org.mozilla.javascript.ScriptRuntime.doCall(ScriptRuntime.java:2998) at org.mozilla.javascript.Interpreter.interpretLoop(Interpreter.java:1928) at org.mozilla.javascript.Interpreter.interpret(Interpreter.java:1112) at org.mozilla.javascript.InterpretedFunction.lambda$call$0(InterpretedFunction.java:161) at com.glide.caller.gen.sys_script_include_778011130a0a0b2500c4595ad1d1d768_script.call(Unknown Source) at com.glide.script.ScriptCaller.call(ScriptCaller.java:22) at org.mozilla.javascript.InterpretedFunction.call(InterpretedFunction.java:160) at org.mozilla.javascript.ScriptRuntime.doCall2(ScriptRuntime.java:3086) at org.mozilla.javascript.ScriptRuntime.doCall(ScriptRuntime.java:2998) at org.mozilla.javascript.Interpreter.interpretLoop(Interpreter.java:1928) at org.mozilla.javascript.Interpreter.interpret(Interpreter.java:1112) at org.mozilla.javascript.InterpretedFunction.lambda$call$0(InterpretedFunction.java:161) at com.glide.caller.gen.sys_script_include_778011130a0a0b2500c4595ad1d1d768_script.call(Unknown Source) at com.glide.script.ScriptCaller.call(ScriptCaller.java:22) at org.mozilla.javascript.InterpretedFunction.call(InterpretedFunction.java:160) at org.mozilla.javascript.ScriptRuntime.doCall2(ScriptRuntime.java:3086) at org.mozilla.javascript.ScriptRuntime.doCall(ScriptRuntime.java:2998) at org.mozilla.javascript.Interpreter.interpretLoop(Interpreter.java:1928) at org.mozilla.javascript.Interpreter.interpret(Interpreter.java:1112) at org.mozilla.javascript.InterpretedFunction.lambda$call$0(InterpretedFunction.java:161) at com.glide.caller.gen.sys_script_include_778011130a0a0b2500c4595ad1d1d768_script.call(Unknown Source) at com.glide.script.ScriptCaller.call(ScriptCaller.java:22) at org.mozilla.javascript.InterpretedFunction.call(InterpretedFunction.java:160) at org.mozilla.javascript.ScriptRuntime.doCall2(ScriptRuntime.java:3086) at org.mozilla.javascript.ScriptRuntime.doCall(ScriptRuntime.java:2998) at org.mozilla.javascript.Interpreter.interpretLoop(Interpreter.java:1928) at org.mozilla.javascript.Interpreter.interpret(Interpreter.java:1112) at org.mozilla.javascript.InterpretedFunction.lambda$call$0(InterpretedFunction.java:161) at com.glide.caller.gen.sys_script_include_778011130a0a0b2500c4595ad1d1d768_script.call(Unknown Source) at com.glide.script.ScriptCaller.call(ScriptCaller.java:22) at org.mozilla.javascript.InterpretedFunction.call(InterpretedFunction.java:160) at org.mozilla.javascript.ScriptRuntime.doCall2(ScriptRuntime.java:3086) at org.mozilla.javascript.ScriptRuntime.doCall(ScriptRuntime.java:2998) at org.mozilla.javascript.ScriptRuntime.applyOrCall(ScriptRuntime.java:2947) at org.mozilla.javascript.BaseFunction.execIdCall(BaseFunction.java:378) at org.mozilla.javascript.IdFunctionObject.call(IdFunctionObject.java:129) at org.mozilla.javascript.ScriptRuntime.doCall2(ScriptRuntime.java:3086) at org.mozilla.javascript.ScriptRuntime.doCall(ScriptRuntime.java:2998) at org.mozilla.javascript.Interpreter.interpretLoop(Interpreter.java:1928) at org.mozilla.javascript.Interpreter.interpret(Interpreter.java:1112) at org.mozilla.javascript.InterpretedFunction.lambda$exec$1(InterpretedFunction.java:178) at com.glide.caller.gen.discovery_sensor_0fe358250ab301500026926821fe5cac.call(Unknown Source) at com.glide.script.ScriptCaller.call(ScriptCaller.java:22) at org.mozilla.javascript.InterpretedFunction.exec(InterpretedFunction.java:177) at com.glide.script.ScriptCompiler.executeAndPublishMetric(ScriptCompiler.java:77) at com.glide.script.ScriptEvaluator.execute(ScriptEvaluator.java:427) at com.glide.script.ScriptEvaluator.evaluate(ScriptEvaluator.java:210) at com.glide.script.ScriptEvaluator.evaluateString(ScriptEvaluator.java:349) at com.glide.script.ScriptEvaluator.evaluateString(ScriptEvaluator.java:142) at com.snc.discovery.DiscoveryUtils.evaluateStringWithCurrent(DiscoveryUtils.java:96) at com.snc.discovery.sensor.processor.JavascriptSensor.process(JavascriptSensor.java:54) at com.snc.discovery.sensor.ASensor.processSensor(ASensor.java:79) at com.snc.discovery.sensor.ASensor.run(ASensor.java:73) at com.snc.discovery.SensorEvaluator.run(SensorEvaluator.java:39) at com.snc.discovery.SensorProcessor.processSensor(SensorProcessor.java:623) at com.snc.discovery.SensorProcessor.processSensors(SensorProcessor.java:567) at com.snc.discovery.SensorProcessor.processSinglePage(SensorProcessor.java:431) at com.snc.discovery.SensorProcessor.process(SensorProcessor.java:224) at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:77) at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.base/java.lang.reflect.Method.invoke(Method.java:569) at org.mozilla.javascript.MemberBox.invoke(MemberBox.java:228) at org.mozilla.javascript.NativeJavaMethod.call(NativeJavaMethod.java:294) at org.mozilla.javascript.ScriptRuntime.doCall(ScriptRuntime.java:2991) at org.mozilla.javascript.Interpreter.interpretLoop(Interpreter.java:1928) at org.mozilla.javascript.Interpreter.interpret(Interpreter.java:1112) at org.mozilla.javascript.InterpretedFunction.lambda$call$0(InterpretedFunction.java:161) at com.glide.caller.gen.sys_script_include_78dfb2dd536002001f175f43911c087d_script.call(Unknown Source) at com.glide.script.ScriptCaller.call(ScriptCaller.java:22) at org.mozilla.javascript.InterpretedFunction.call(InterpretedFunction.java:160) at org.mozilla.javascript.ScriptRuntime.doCall2(ScriptRuntime.java:3086) at org.mozilla.javascript.ScriptRuntime.doCall(ScriptRuntime.java:2998) at org.mozilla.javascript.Interpreter.interpretLoop(Interpreter.java:1928) at org.mozilla.javascript.Interpreter.interpret(Interpreter.java:1112) at org.mozilla.javascript.InterpretedFunction.lambda$call$0(InterpretedFunction.java:161) at com.glide.caller.gen.sys_script_include_78dfb2dd536002001f175f43911c087d_script.call(Unknown Source) at com.glide.script.ScriptCaller.call(ScriptCaller.java:22) at org.mozilla.javascript.InterpretedFunction.call(InterpretedFunction.java:160) at org.mozilla.javascript.ScriptRuntime.doCall2(ScriptRuntime.java:3086) at org.mozilla.javascript.ScriptRuntime.doCall(ScriptRuntime.java:2998) at org.mozilla.javascript.Interpreter.interpretLoop(Interpreter.java:1928) at org.mozilla.javascript.Interpreter.interpret(Interpreter.java:1112) at org.mozilla.javascript.InterpretedFunction.lambda$call$0(InterpretedFunction.java:161) at com.glide.caller.gen.sys_trigger_b1730fea3ba41210c8c7944a85e45abc.call(Unknown Source) at com.glide.script.ScriptCaller.call(ScriptCaller.java:22) at org.mozilla.javascript.InterpretedFunction.call(InterpretedFunction.java:160) at org.mozilla.javascript.ContextFactory.doTopCall(ContextFactory.java:702) at org.mozilla.javascript.ScriptRuntime.doTopCall(ScriptRuntime.java:4401) at org.mozilla.javascript.InterpretedFunction.exec(InterpretedFunction.java:174) at com.glide.script.ScriptCompiler.executeAndPublishMetric(ScriptCompiler.java:77) at com.glide.script.ScriptEvaluator.execute(ScriptEvaluator.java:427) at com.glide.script.ScriptEvaluator.evaluate(ScriptEvaluator.java:210) at com.glide.script.ScriptEvaluator.eva 2024-09-19 00:42:22 (251) worker.5 worker.5 txid=4cf61e6c3bb0 SSI_cea19a970ab3015300f10bda87362122 SEVERE *** ERROR *** Cannot just-in-time load the signature record: Couldn't find pluginId for documentId: 0fe358250ab301500026926821fe5cac with signatureRecordSysId: 84390bf184eb4dd9a3484ad4e9cc71c1

Workaround This is a limitation of the Discovery functionality. There is no workaround and the moment. Discovery is expected to support code signing in Zurich version.