ant-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Stefan Bodewig <bode...@apache.org>
Subject Re: [signjar] prevent double signing
Date Thu, 04 Nov 2004 14:52:50 GMT
On Thu, 4 Nov 2004, Ivan Ivanov <rambiusparkisanius@yahoo.com> wrote:

> Actually, there *is* a method called isSigned(File) that checks
> whether a jar is signed, so what you want *is* possible.

A signed jar contains the signature in a file named ALIAS.SF (ALIAS is
a placeholder here) inside of the META-INF directory.  All the code in
signjar does is checking for this file.

It doesn not check whether the file contains anything useful or the
signature is valid.

> not I am sure whether this method is in older versions of
> Ant.

Should have been in there for longer.  Let's see
<http://cvs.apache.org/viewcvs.cgi/ant/src/main/org/apache/tools/ant/taskdefs/SignJar.java?r1=1.7&r2=1.8>
has been added for Ant 1.4.

Stefan

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@ant.apache.org
For additional commands, e-mail: user-help@ant.apache.org


Mime
View raw message