prevent double signing 2004-11-05 - By Stefan Bodewig
On Fri, 05 Nov 2004, T. E. Schmitz <mailreg@(protected)>
wrote:
> Thanks for the links. I couldn't find any information though as to
> that and why jarsigner truncates the alias: jarsigner takes the
> alias name, truncates it to 8 characters and uses this as a basename
> for the SF file.
I just stumbled over this[1], you may want to use a vote on it 8-)
> Back to my original question: can I avoid that a jar might be signed
> with more than one signature?
Not yet. It would be rather easy to use ZipFile to look into the
archive, from inside a custom condition, for example.
> So, I either write my first Ant task or I use the dirty option of
> extracting all files and testing for the existance of an SF file :-(
I'd go for a condition.
>> <http://ant.apache.org/faq.html#winzip-lies> applies to any
>> archives, not only those created by Ant.
>
> I realized this, too, last night and I must say I was totally
> flummoxed. Serves me right for using Winblows. In German I'd call
> this a case of "Volksverdummung".
I wouldn't go that far. It's more yet another case of "we know what
is good for you" that seems to be prevalent in certain OSes.
To me it's closer to "Bevormundung" with some "das mu? Sie nicht
interessieren" thrown in.
Stefan
Footnotes:
[1] http://issues.apache.org/bugzilla/show_bug.cgi?id=30517
--
http://stefanbodewig.blogger.de/
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@(protected)
For additional commands, e-mail: user-help@(protected)
|
|
