Return-Path: Delivered-To: apmail-ant-user-archive@www.apache.org Received: (qmail 49708 invoked from network); 5 Nov 2004 15:40:55 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199) by minotaur-2.apache.org with SMTP; 5 Nov 2004 15:40:55 -0000 Received: (qmail 46976 invoked by uid 500); 5 Nov 2004 15:40:22 -0000 Delivered-To: apmail-ant-user-archive@ant.apache.org Received: (qmail 46782 invoked by uid 500); 5 Nov 2004 15:40:21 -0000 Mailing-List: contact user-help@ant.apache.org; run by ezmlm Precedence: bulk List-Unsubscribe: List-Subscribe: List-Help: List-Post: List-Id: "Ant Users List" Reply-To: "Ant Users List" Delivered-To: mailing list user@ant.apache.org Received: (qmail 46701 invoked by uid 99); 5 Nov 2004 15:40:20 -0000 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received-SPF: neutral (hermes.apache.org: local policy) Received: from [62.96.16.111] (HELO bodewig.bost.de) (62.96.16.111) by apache.org (qpsmtpd/0.28) with ESMTP; Fri, 05 Nov 2004 07:40:17 -0800 Received: (from bodewig@localhost) by bodewig.bost.de (8.11.6/8.11.6) id iA5Fe5t14553; Fri, 5 Nov 2004 16:40:05 +0100 X-Authentication-Warning: bodewig.bost.de: bodewig set sender to bodewig@apache.org using -f To: user@ant.apache.org Subject: Re: [signjar] prevent double signing X-Draft-From: ("nnfolder:mail.jakarta-ant-user" 44552) References: <20041104144104.59083.qmail@web52902.mail.yahoo.com> <418A6587.3000401@numerixtechnology.de> <418B70D0.1000603@numerixtechnology.de> From: Stefan Bodewig Date: Fri, 05 Nov 2004 16:40:05 +0100 In-Reply-To: <418B70D0.1000603@numerixtechnology.de> (T. E. Schmitz's message of "Fri, 05 Nov 2004 12:23:44 +0000") Message-ID: User-Agent: Gnus/5.1006 (Gnus v5.10.6) XEmacs/21.4 (Security Through Obscurity, linux) MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Virus-Checked: Checked X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N On Fri, 05 Nov 2004, T. E. Schmitz wrote: > Thanks for the links. I couldn't find any information though as to > that and why jarsigner truncates the alias: jarsigner takes the > alias name, truncates it to 8 characters and uses this as a basename > for the SF file. I just stumbled over this[1], you may want to use a vote on it 8-) > Back to my original question: can I avoid that a jar might be signed > with more than one signature? Not yet. It would be rather easy to use ZipFile to look into the archive, from inside a custom condition, for example. > So, I either write my first Ant task or I use the dirty option of > extracting all files and testing for the existance of an SF file :-( I'd go for a condition. >> applies to any >> archives, not only those created by Ant. > > I realized this, too, last night and I must say I was totally > flummoxed. Serves me right for using Winblows. In German I'd call > this a case of "Volksverdummung". I wouldn't go that far. It's more yet another case of "we know what is good for you" that seems to be prevalent in certain OSes. To me it's closer to "Bevormundung" with some "das mu� Sie nicht interessieren" thrown in. Stefan Footnotes: [1] http://issues.apache.org/bugzilla/show_bug.cgi?id=30517 -- http://stefanbodewig.blogger.de/ --------------------------------------------------------------------- To unsubscribe, e-mail: user-unsubscribe@ant.apache.org For additional commands, e-mail: user-help@ant.apache.org