You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@harmony.apache.org by Alexei Fedotov <al...@gmail.com> on 2008/02/28 00:22:58 UTC
[classlib][archive] drop signtool support
Hello folks,
While people seem busy with developing a Netscape plug-in, I wonder
what we should do with Netscape signtool support in the archive
module. The tool [1] itself seems to be dead, and I cannot check if
HARMONY-204 really breaks that support. It seems so from the comment.
I suggest either undoing HARMONY-204 changes related to signtool
support, or dropping the support completely. Thoughts? References to a
living signtool instance?
--
With best regards,
Alexei
[1] http://java.sun.com/products/plugin/1.3/docs/rsa_signing.html
Re: [classlib][archive] drop signtool support
Posted by Alexei Fedotov <al...@gmail.com>.
Stepan, all,
Thanks for your suggestions. I have slightly fixed the code and
believe the support removal may wait for better times.
Alexey,
I've noticed your venture for plug-ins. If you occasionally encounter
a signtool-signed applet, please keep it for testing purposes.
Thanks!
On Fri, Feb 29, 2008 at 12:44 PM, Stepan Mishura
<st...@gmail.com> wrote:
>
> On 2/29/08, Alexey Petrenko <al...@gmail.com> wrote:
> > 2008/2/29, Stepan Mishura <st...@gmail.com>:
> > > On 2/28/08, Alexei Fedotov <al...@gmail.com> wrote:
> > > > Hello folks,
> > > >
> > > > While people seem busy with developing a Netscape plug-in, I wonder
> > > > what we should do with Netscape signtool support in the archive
> > > > module. The tool [1] itself seems to be dead, and I cannot check if
> > > > HARMONY-204 really breaks that support. It seems so from the comment.
> > > > I suggest either undoing HARMONY-204 changes related to signtool
> > > > support, or dropping the support completely. Thoughts? References to a
> > > > living signtool instance?
> > >
> > > Alexei, you most probably right that the tool is not available (at
> > > least I couldn't find the tool's binaries for download).
> > We have some jarsigner on jdk_tools. Here is the sources:
> > https://svn.apache.org/repos/asf/harmony/enhanced/jdktools/trunk/modules/tools/src/main/java/org/apache/harmony/tools/jarsigner
> >
> > > But I'm not quite sure that Harmony shouldn't support jars signed
> > > by the tool
> > I would say that Harmony should support signed jars :)
>
> We are talking about jars signed by Netscape signtool .
>
> -Stepan.
>
> >
> > SY, Alexey
> >
>
--
With best regards,
Alexei
Re: [classlib][archive] drop signtool support
Posted by Stepan Mishura <st...@gmail.com>.
On 2/29/08, Alexey Petrenko <al...@gmail.com> wrote:
> 2008/2/29, Stepan Mishura <st...@gmail.com>:
> > On 2/28/08, Alexei Fedotov <al...@gmail.com> wrote:
> > > Hello folks,
> > >
> > > While people seem busy with developing a Netscape plug-in, I wonder
> > > what we should do with Netscape signtool support in the archive
> > > module. The tool [1] itself seems to be dead, and I cannot check if
> > > HARMONY-204 really breaks that support. It seems so from the comment.
> > > I suggest either undoing HARMONY-204 changes related to signtool
> > > support, or dropping the support completely. Thoughts? References to a
> > > living signtool instance?
> >
> > Alexei, you most probably right that the tool is not available (at
> > least I couldn't find the tool's binaries for download).
> We have some jarsigner on jdk_tools. Here is the sources:
> https://svn.apache.org/repos/asf/harmony/enhanced/jdktools/trunk/modules/tools/src/main/java/org/apache/harmony/tools/jarsigner
>
> > But I'm not quite sure that Harmony shouldn't support jars signed
> > by the tool
> I would say that Harmony should support signed jars :)
We are talking about jars signed by Netscape signtool .
-Stepan.
>
> SY, Alexey
>
Re: [classlib][archive] drop signtool support
Posted by Alexey Petrenko <al...@gmail.com>.
2008/2/29, Stepan Mishura <st...@gmail.com>:
> On 2/28/08, Alexei Fedotov <al...@gmail.com> wrote:
> > Hello folks,
> >
> > While people seem busy with developing a Netscape plug-in, I wonder
> > what we should do with Netscape signtool support in the archive
> > module. The tool [1] itself seems to be dead, and I cannot check if
> > HARMONY-204 really breaks that support. It seems so from the comment.
> > I suggest either undoing HARMONY-204 changes related to signtool
> > support, or dropping the support completely. Thoughts? References to a
> > living signtool instance?
>
> Alexei, you most probably right that the tool is not available (at
> least I couldn't find the tool's binaries for download).
We have some jarsigner on jdk_tools. Here is the sources:
https://svn.apache.org/repos/asf/harmony/enhanced/jdktools/trunk/modules/tools/src/main/java/org/apache/harmony/tools/jarsigner
> But I'm not quite sure that Harmony shouldn't support jars signed
> by the tool
I would say that Harmony should support signed jars :)
SY, Alexey
Re: [classlib][archive] drop signtool support
Posted by Stepan Mishura <st...@gmail.com>.
On 2/28/08, Alexei Fedotov <al...@gmail.com> wrote:
> Hello folks,
>
> While people seem busy with developing a Netscape plug-in, I wonder
> what we should do with Netscape signtool support in the archive
> module. The tool [1] itself seems to be dead, and I cannot check if
> HARMONY-204 really breaks that support. It seems so from the comment.
> I suggest either undoing HARMONY-204 changes related to signtool
> support, or dropping the support completely. Thoughts? References to a
> living signtool instance?
Alexei, you most probably right that the tool is not available (at
least I couldn't find the tool's binaries for download). But I'm not
quite sure that Harmony shouldn't support jars signed by the tool (I
don't know how many jars were signed and currently still in use).
Does RI support such jars?
Thanks,
Stepan.
>
> --
> With best regards,
> Alexei
>
> [1] http://java.sun.com/products/plugin/1.3/docs/rsa_signing.html
>
Re: [classlib][archive] drop signtool support
Posted by Stepan Mishura <st...@gmail.com>.
On 2/28/08, Alexei Fedotov <al...@gmail.com> wrote:
> Stepan,
> I have added three comments to HARMONY-5555.
>
OK, thanks!
-Stepan.
> On Thu, Feb 28, 2008 at 12:39 PM, Stepan Mishura
> <st...@gmail.com> wrote:
> > On 2/28/08, Alexei Fedotov <al...@gmail.com> wrote:
> >
> > > Stepan,
> > > Thanks for your interest! May be I was too harsh, and the support was
> > > not broken. The only problem is the FIXME comment itself introduced by
> > > the commit [1] of HARMONY-204.
> >
> > OK, now the connection with signtool is clear, thank for clarification!
> >
> > Could you also additionally comment HARMONY-5555? From this JIRA
> > description it is not obvious for me what the problem is.
> >
> > Thanks,
> > Stepan.
> >
> >
> >
> > >
> > > [1] http://svn.apache.org/viewvc/incubator/harmony/enhanced/classlib/trunk/modules/archive/src/main/java/java/util/jar/JarVerifier.java?r1=384239&r2=391283&pathrev=410562&diff_format=h
> > >
> > >
> > >
> > > On Thu, Feb 28, 2008 at 6:40 AM, Stepan Mishura
> > > <st...@gmail.com> wrote:
> > > > On 2/28/08, Alexei Fedotov <al...@gmail.com> wrote:
> > > > > Hello folks,
> > > > >
> > > > > While people seem busy with developing a Netscape plug-in, I wonder
> > > > > what we should do with Netscape signtool support in the archive
> > > > > module. The tool [1] itself seems to be dead, and I cannot check if
> > > > > HARMONY-204 really breaks that support. It seems so from the comment.
> > > > > I suggest either undoing HARMONY-204 changes related to signtool
> > > > > support,
> > > >
> > > > Hi Alexei,
> > > >
> > > > I don't see any connection between HARMONY-204 and Netscape signtool
> > > > support - the JIRA (as well the spec.) doesn't mention Netscape tool
> > > > at all. As I understood HARMONY-204 description and comments - it
> > > > fixed Harmony bug and align it with the spec. and RI behaviour.
> > > >
> > > > Could you clarify?
> > > >
> > > > Thanks,
> > > > Stepan.
> > > >
> > > >
> > > >
> > > > > or dropping the support completely. Thoughts? References to a
> > > > > living signtool instance?
> > > > >
> > > > > --
> > > > > With best regards,
> > > > > Alexei
> > > > >
> > > > > [1] http://java.sun.com/products/plugin/1.3/docs/rsa_signing.html
> > > > >
> > > >
> > >
> > >
> > >
> > > --
> > > With best regards,
> > > Alexei
> > >
> >
>
>
>
> --
> With best regards,
> Alexei
>
Re: [classlib][archive] drop signtool support
Posted by Alexei Fedotov <al...@gmail.com>.
Stepan,
I have added three comments to HARMONY-5555.
On Thu, Feb 28, 2008 at 12:39 PM, Stepan Mishura
<st...@gmail.com> wrote:
> On 2/28/08, Alexei Fedotov <al...@gmail.com> wrote:
>
> > Stepan,
> > Thanks for your interest! May be I was too harsh, and the support was
> > not broken. The only problem is the FIXME comment itself introduced by
> > the commit [1] of HARMONY-204.
>
> OK, now the connection with signtool is clear, thank for clarification!
>
> Could you also additionally comment HARMONY-5555? From this JIRA
> description it is not obvious for me what the problem is.
>
> Thanks,
> Stepan.
>
>
>
> >
> > [1] http://svn.apache.org/viewvc/incubator/harmony/enhanced/classlib/trunk/modules/archive/src/main/java/java/util/jar/JarVerifier.java?r1=384239&r2=391283&pathrev=410562&diff_format=h
> >
> >
> >
> > On Thu, Feb 28, 2008 at 6:40 AM, Stepan Mishura
> > <st...@gmail.com> wrote:
> > > On 2/28/08, Alexei Fedotov <al...@gmail.com> wrote:
> > > > Hello folks,
> > > >
> > > > While people seem busy with developing a Netscape plug-in, I wonder
> > > > what we should do with Netscape signtool support in the archive
> > > > module. The tool [1] itself seems to be dead, and I cannot check if
> > > > HARMONY-204 really breaks that support. It seems so from the comment.
> > > > I suggest either undoing HARMONY-204 changes related to signtool
> > > > support,
> > >
> > > Hi Alexei,
> > >
> > > I don't see any connection between HARMONY-204 and Netscape signtool
> > > support - the JIRA (as well the spec.) doesn't mention Netscape tool
> > > at all. As I understood HARMONY-204 description and comments - it
> > > fixed Harmony bug and align it with the spec. and RI behaviour.
> > >
> > > Could you clarify?
> > >
> > > Thanks,
> > > Stepan.
> > >
> > >
> > >
> > > > or dropping the support completely. Thoughts? References to a
> > > > living signtool instance?
> > > >
> > > > --
> > > > With best regards,
> > > > Alexei
> > > >
> > > > [1] http://java.sun.com/products/plugin/1.3/docs/rsa_signing.html
> > > >
> > >
> >
> >
> >
> > --
> > With best regards,
> > Alexei
> >
>
--
With best regards,
Alexei
Re: [classlib][archive] drop signtool support
Posted by Stepan Mishura <st...@gmail.com>.
On 2/28/08, Alexei Fedotov <al...@gmail.com> wrote:
> Stepan,
> Thanks for your interest! May be I was too harsh, and the support was
> not broken. The only problem is the FIXME comment itself introduced by
> the commit [1] of HARMONY-204.
OK, now the connection with signtool is clear, thank for clarification!
Could you also additionally comment HARMONY-5555? From this JIRA
description it is not obvious for me what the problem is.
Thanks,
Stepan.
>
> [1] http://svn.apache.org/viewvc/incubator/harmony/enhanced/classlib/trunk/modules/archive/src/main/java/java/util/jar/JarVerifier.java?r1=384239&r2=391283&pathrev=410562&diff_format=h
>
>
>
> On Thu, Feb 28, 2008 at 6:40 AM, Stepan Mishura
> <st...@gmail.com> wrote:
> > On 2/28/08, Alexei Fedotov <al...@gmail.com> wrote:
> > > Hello folks,
> > >
> > > While people seem busy with developing a Netscape plug-in, I wonder
> > > what we should do with Netscape signtool support in the archive
> > > module. The tool [1] itself seems to be dead, and I cannot check if
> > > HARMONY-204 really breaks that support. It seems so from the comment.
> > > I suggest either undoing HARMONY-204 changes related to signtool
> > > support,
> >
> > Hi Alexei,
> >
> > I don't see any connection between HARMONY-204 and Netscape signtool
> > support - the JIRA (as well the spec.) doesn't mention Netscape tool
> > at all. As I understood HARMONY-204 description and comments - it
> > fixed Harmony bug and align it with the spec. and RI behaviour.
> >
> > Could you clarify?
> >
> > Thanks,
> > Stepan.
> >
> >
> >
> > > or dropping the support completely. Thoughts? References to a
> > > living signtool instance?
> > >
> > > --
> > > With best regards,
> > > Alexei
> > >
> > > [1] http://java.sun.com/products/plugin/1.3/docs/rsa_signing.html
> > >
> >
>
>
>
> --
> With best regards,
> Alexei
>
Re: [classlib][archive] drop signtool support
Posted by Alexei Fedotov <al...@gmail.com>.
Stepan,
Thanks for your interest! May be I was too harsh, and the support was
not broken. The only problem is the FIXME comment itself introduced by
the commit [1] of HARMONY-204.
[1] http://svn.apache.org/viewvc/incubator/harmony/enhanced/classlib/trunk/modules/archive/src/main/java/java/util/jar/JarVerifier.java?r1=384239&r2=391283&pathrev=410562&diff_format=h
On Thu, Feb 28, 2008 at 6:40 AM, Stepan Mishura
<st...@gmail.com> wrote:
> On 2/28/08, Alexei Fedotov <al...@gmail.com> wrote:
> > Hello folks,
> >
> > While people seem busy with developing a Netscape plug-in, I wonder
> > what we should do with Netscape signtool support in the archive
> > module. The tool [1] itself seems to be dead, and I cannot check if
> > HARMONY-204 really breaks that support. It seems so from the comment.
> > I suggest either undoing HARMONY-204 changes related to signtool
> > support,
>
> Hi Alexei,
>
> I don't see any connection between HARMONY-204 and Netscape signtool
> support - the JIRA (as well the spec.) doesn't mention Netscape tool
> at all. As I understood HARMONY-204 description and comments - it
> fixed Harmony bug and align it with the spec. and RI behaviour.
>
> Could you clarify?
>
> Thanks,
> Stepan.
>
>
>
> > or dropping the support completely. Thoughts? References to a
> > living signtool instance?
> >
> > --
> > With best regards,
> > Alexei
> >
> > [1] http://java.sun.com/products/plugin/1.3/docs/rsa_signing.html
> >
>
--
With best regards,
Alexei
Re: [classlib][archive] drop signtool support
Posted by Stepan Mishura <st...@gmail.com>.
On 2/28/08, Alexei Fedotov <al...@gmail.com> wrote:
> Hello folks,
>
> While people seem busy with developing a Netscape plug-in, I wonder
> what we should do with Netscape signtool support in the archive
> module. The tool [1] itself seems to be dead, and I cannot check if
> HARMONY-204 really breaks that support. It seems so from the comment.
> I suggest either undoing HARMONY-204 changes related to signtool
> support,
Hi Alexei,
I don't see any connection between HARMONY-204 and Netscape signtool
support - the JIRA (as well the spec.) doesn't mention Netscape tool
at all. As I understood HARMONY-204 description and comments - it
fixed Harmony bug and align it with the spec. and RI behaviour.
Could you clarify?
Thanks,
Stepan.
> or dropping the support completely. Thoughts? References to a
> living signtool instance?
>
> --
> With best regards,
> Alexei
>
> [1] http://java.sun.com/products/plugin/1.3/docs/rsa_signing.html
>