You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@netbeans.apache.org by "Tiago Martins (Jira)" <ji...@apache.org> on 2020/06/26 19:34:00 UTC
[jira] [Updated] (NETBEANS-4508) Limitation to sign Ant based nbm
with timestamp
[ https://issues.apache.org/jira/browse/NETBEANS-4508?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Tiago Martins updated NETBEANS-4508:
------------------------------------
Description:
Warning when sign a nbm using nbm Ant script.
output message
Warning
No -tsa or -tsacert is provided and this jar is not timestamped. Without a timestamp, users may not be able to validate this jar after the signer certificate's expiration date (2021-03-16).
{color:#de350b}Classic.xml target nbm doesn't support timestamp url server (-tsa command of jarsigner.exe{color})
<target name="nbm" depends="init,netbeans,-nbm-prompt-for-storepass,-init-executables,-init-extra.nbm.files" description="Build NBM archive.">
<mkdir dir="${build.dir}"/>
<property name="nbm.target.cluster" value=""/> <!-- fallback -->
<property name="license.file.override" value="${license.file}"/>
<property name="use.pack200" value="true"/>
<property name="pack200.excludes" value=""/>
<property name="nbm.locales" value="${locales}"/>
<makenbm file="${build.dir}/${nbm}"
productdir="${cluster}"
module="${module.jar}"
homepage="${nbm.homepage}"
distribution="${nbm.distribution}"
needsrestart="${nbm.needs.restart}"
global="${nbm.is.global}"
preferredupdate="${nbm.is.preferredupdate}"
usepack200="${use.pack200}"
pack200excludes="${pack200.excludes}"
alwayscreatenbm="${nbm.always.create}"
targetcluster="${nbm.target.cluster}"
releasedate="${nbm.release.date}"
moduleauthor="${nbm.module.author}"
locales="${nbm.locales}"
>
<license file="${license.file.override}"/>
<signature keystore="${keystore}" storepass="${storepass}" alias="${nbm_alias}"/>
<updaterjar>
<pathfileset>
<path refid="cluster.path.id"/>
<filename name="modules/ext/updater.jar"/>
</pathfileset>
</updaterjar>
<executables refid="module.executable.files"/>
<extranbmfiles refid="extra.nbm.files"/>
</makenbm>
</target>
was:
Warning when sign a nmb using nmb Ant script.
output message
Warning
No -tsa or -tsacert is provided and this jar is not timestamped. Without a timestamp, users may not be able to validate this jar after the signer certificate's expiration date (2021-03-16).
{color:#de350b}{color:#172b4d}Classic.xml target nbm doesn't support timestamp url server (-tsa command of jarsigner.exe{color}) {color}
<target name="nbm" depends="init,netbeans,-nbm-prompt-for-storepass,-init-executables,-init-extra.nbm.files" description="Build NBM archive.">
<mkdir dir="${build.dir}"/>
<property name="nbm.target.cluster" value=""/> <!-- fallback -->
<property name="license.file.override" value="${license.file}"/>
<property name="use.pack200" value="true"/>
<property name="pack200.excludes" value=""/>
<property name="nbm.locales" value="${locales}"/>
<makenbm file="${build.dir}/${nbm}"
productdir="${cluster}"
module="${module.jar}"
homepage="${nbm.homepage}"
distribution="${nbm.distribution}"
needsrestart="${nbm.needs.restart}"
global="${nbm.is.global}"
preferredupdate="${nbm.is.preferredupdate}"
usepack200="${use.pack200}"
pack200excludes="${pack200.excludes}"
alwayscreatenbm="${nbm.always.create}"
targetcluster="${nbm.target.cluster}"
releasedate="${nbm.release.date}"
moduleauthor="${nbm.module.author}"
locales="${nbm.locales}"
>
<license file="${license.file.override}"/>
{color:#de350b}<signature keystore="${keystore}" storepass="${storepass}" alias="${nbm_alias}"/>{color}
<updaterjar>
<pathfileset>
<path refid="cluster.path.id"/>
<filename name="modules/ext/updater.jar"/>
</pathfileset>
</updaterjar>
<executables refid="module.executable.files"/>
<extranbmfiles refid="extra.nbm.files"/>
</makenbm>
</target>
> Limitation to sign Ant based nbm with timestamp
> -----------------------------------------------
>
> Key: NETBEANS-4508
> URL: https://issues.apache.org/jira/browse/NETBEANS-4508
> Project: NetBeans
> Issue Type: Bug
> Components: projects - Ant
> Affects Versions: 11.3
> Reporter: Tiago Martins
> Priority: Major
>
> Warning when sign a nbm using nbm Ant script.
> output message
> Warning
> No -tsa or -tsacert is provided and this jar is not timestamped. Without a timestamp, users may not be able to validate this jar after the signer certificate's expiration date (2021-03-16).
>
> {color:#de350b}Classic.xml target nbm doesn't support timestamp url server (-tsa command of jarsigner.exe{color})
>
>
>
> <target name="nbm" depends="init,netbeans,-nbm-prompt-for-storepass,-init-executables,-init-extra.nbm.files" description="Build NBM archive.">
> <mkdir dir="${build.dir}"/>
> <property name="nbm.target.cluster" value=""/> <!-- fallback -->
> <property name="license.file.override" value="${license.file}"/>
> <property name="use.pack200" value="true"/>
> <property name="pack200.excludes" value=""/>
> <property name="nbm.locales" value="${locales}"/>
> <makenbm file="${build.dir}/${nbm}"
> productdir="${cluster}"
> module="${module.jar}"
> homepage="${nbm.homepage}"
> distribution="${nbm.distribution}"
> needsrestart="${nbm.needs.restart}"
> global="${nbm.is.global}"
> preferredupdate="${nbm.is.preferredupdate}"
> usepack200="${use.pack200}"
> pack200excludes="${pack200.excludes}"
> alwayscreatenbm="${nbm.always.create}"
> targetcluster="${nbm.target.cluster}"
> releasedate="${nbm.release.date}"
> moduleauthor="${nbm.module.author}"
> locales="${nbm.locales}"
> >
> <license file="${license.file.override}"/>
> <signature keystore="${keystore}" storepass="${storepass}" alias="${nbm_alias}"/>
> <updaterjar>
> <pathfileset>
> <path refid="cluster.path.id"/>
> <filename name="modules/ext/updater.jar"/>
> </pathfileset>
> </updaterjar>
> <executables refid="module.executable.files"/>
> <extranbmfiles refid="extra.nbm.files"/>
> </makenbm>
> </target>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@netbeans.apache.org
For additional commands, e-mail: commits-help@netbeans.apache.org
For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists