prevent double signing 2004-11-04 - By Stefan Bodewig
On Thu, 4 Nov 2004, Ivan Ivanov <rambiusparkisanius@(protected)> wrote:
> Actually, there *is* a method called isSigned(File) that checks
> whether a jar is signed, so what you want *is* possible.
A signed jar contains the signature in a file named ALIAS.SF (ALIAS is
a placeholder here) inside of the META-INF directory. All the code in
signjar does is checking for this file.
It doesn not check whether the file contains anything useful or the
signature is valid.
> not I am sure whether this method is in older versions of
> Ant.
Should have been in there for longer. Let's see
<http://cvs.apache.org/viewcvs.cgi/ant/src/main/org/apache/tools/ant/taskdefs
/SignJar.java?r1=1.7&r2=1.8>
has been added for Ant 1.4.
Stefan
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@(protected)
For additional commands, e-mail: user-help@(protected)
|
|
