java - jarsigner and files / directories in META-INF -
java - jarsigner and files / directories in META-INF -
i have problems signing jar files. have files in meta-inf directory , not signed when utilize jarsigner, then, verification fails because of unsigned entries.
i'm not creating jar, cannot alter construction and/or remove files.
how files meta-inf signed?
here part of build.xml file manipulating jar file:
1345 <jar destfile="${proj.build.webui.war.dir}/name.jar" 1346 update="true"> 1347 <manifest> 1348 <attribute name="permissions" 1349 value="all-permissions"/> 1350 <attribute name="codebase" 1351 value="*"/> 1352 <attribute name="trusted-library" 1353 value="true"/> 1354 </manifest> 1355 </jar> 1356 <!-- sign jar files --> 1357 <chmod perm="u+x"> 1358 <fileset dir="${proj.buildtools.dir}"> 1359 <include name="dsjarsigner"/> 1360 </fileset> 1361 </chmod> 1362 <signjar destdir="${proj.build.webui.war.dir}" 1363 alias="encryptedalias" 1364 keystore="${proj.buildtools.dir}/keystore.jks" 1365 storepass="encryptedpassword" 1366 executable="${proj.buildtools.dir}/dsjarsigner" 1367 preservelastmodified="true" > 1368 <path> 1369 <fileset dir="${proj.build.webui.war.dir}" includes="name.jar" /> 1370 </path> 1371 <flattenmapper /> 1372 </signjar> dsjarsigner simple java programme calling jarsigner.
it looks your jarsigner skips files in meta-inf. there not much can besides using signer. example, jarsigner openjdk 8 skips files meta-inf, considers "signature-related", not others. observed jarsigners oracle jdks doing same.
java jar applet jarsigner meta-inf
Comments
Post a Comment