You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@maven.apache.org by "Bryan Brouckaert (JIRA)" <ji...@codehaus.org> on 2008/02/26 10:06:28 UTC
[jira] Created: (MJAR-99) Unsigned jar is installed instead of
signed jar when the signature wasn't updated
Unsigned jar is installed instead of signed jar when the signature wasn't updated
---------------------------------------------------------------------------------
Key: MJAR-99
URL: http://jira.codehaus.org/browse/MJAR-99
Project: Maven 2.x Jar Plugin
Issue Type: Bug
Components: sign
Affects Versions: 2.2
Environment: Maven 2.0.8, JRE 1.5, WindowsXP
Reporter: Bryan Brouckaert
When running the first time or after an update it installes the signed jar.
[INFO] [jar:sign {execution: default}]
[INFO] [install:install]
[INFO] Installing D:\Projects\CIN\MyCareNet\Portal\applet\target\signed\applet-0.3-SNAPSHOT.jar to D:\Downloads\Maven\be\cin\mycarenet\portal\applet\0.3-SNAPSHOT\applet-0.3-SNAPSHOT.jar
The second run the signing is skipped (which is ok), but the unsigned jar in installed which isn't ok.
[INFO] [jar:sign {execution: default}]
[debug] jarsigner executable=[C:\Java\jdk1.5.0_14\jre\..\bin\jarsigner.exe]
[debug] Executing: cmd.exe /X /C '"C:\Java\jdk1.5.0_14\jre\..\bin\jarsigner.exe -verify D:\Projects\CIN\MyCareNet\Portal\applet\target\signed\applet-0.3-SNAPSHOT.jar"'
[info] jar verified.
[INFO] JAR D:\Projects\CIN\MyCareNet\Portal\applet\target\signed\applet-0.3-SNAPSHOT.jar is already signed. Skipping.
[INFO] [install:install]
[INFO] Installing D:\Projects\CIN\MyCareNet\Portal\applet\target\applet-0.3-SNAPSHOT.jar to D:\Downloads\Maven\be\cin\mycarenet\portal\applet\0.3-SNAPSHOT\applet-0.3-SNAPSHOT.jar
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Commented: (MJAR-99) Unsigned jar is installed instead of
signed jar when the signature wasn't updated
Posted by "Bryan Brouckaert (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/MJAR-99?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_125169 ]
Bryan Brouckaert commented on MJAR-99:
--------------------------------------
This is of couse only a problem with the following configuration:
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-jar-plugin</artifactId>
<executions>
<execution>
<goals>
<goal>sign</goal>
</goals>
</execution>
</executions>
<configuration>
<keystore>/code.keystore</keystore>
<alias>alias</alias>
<storepass>xxx</storepass>
<signedjar>${project.build.directory}/signed/${project.build.finalName}.jar</signedjar>
</configuration>
> Unsigned jar is installed instead of signed jar when the signature wasn't updated
> ---------------------------------------------------------------------------------
>
> Key: MJAR-99
> URL: http://jira.codehaus.org/browse/MJAR-99
> Project: Maven 2.x Jar Plugin
> Issue Type: Bug
> Components: sign
> Affects Versions: 2.2
> Environment: Maven 2.0.8, JRE 1.5, WindowsXP
> Reporter: Bryan Brouckaert
>
> When running the first time or after an update it installes the signed jar.
> [INFO] [jar:sign {execution: default}]
> [INFO] [install:install]
> [INFO] Installing D:\Projects\CIN\MyCareNet\Portal\applet\target\signed\applet-0.3-SNAPSHOT.jar to D:\Downloads\Maven\be\cin\mycarenet\portal\applet\0.3-SNAPSHOT\applet-0.3-SNAPSHOT.jar
> The second run the signing is skipped (which is ok), but the unsigned jar in installed which isn't ok.
> [INFO] [jar:sign {execution: default}]
> [debug] jarsigner executable=[C:\Java\jdk1.5.0_14\jre\..\bin\jarsigner.exe]
> [debug] Executing: cmd.exe /X /C '"C:\Java\jdk1.5.0_14\jre\..\bin\jarsigner.exe -verify D:\Projects\CIN\MyCareNet\Portal\applet\target\signed\applet-0.3-SNAPSHOT.jar"'
> [info] jar verified.
> [INFO] JAR D:\Projects\CIN\MyCareNet\Portal\applet\target\signed\applet-0.3-SNAPSHOT.jar is already signed. Skipping.
> [INFO] [install:install]
> [INFO] Installing D:\Projects\CIN\MyCareNet\Portal\applet\target\applet-0.3-SNAPSHOT.jar to D:\Downloads\Maven\be\cin\mycarenet\portal\applet\0.3-SNAPSHOT\applet-0.3-SNAPSHOT.jar
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Closed: (MJAR-99) Unsigned jar is installed instead of
signed jar when the signature wasn't updated
Posted by "Benjamin Bentmann (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/MJAR-99?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Benjamin Bentmann closed MJAR-99.
---------------------------------
Assignee: Benjamin Bentmann
Resolution: Won't Fix
The jarsigner related goals in this plugin will be deprecated, please use the dedicated [maven-jarsigner-plugin|http://maven.apache.org/plugins/maven-jarsigner-plugin/].
> Unsigned jar is installed instead of signed jar when the signature wasn't updated
> ---------------------------------------------------------------------------------
>
> Key: MJAR-99
> URL: http://jira.codehaus.org/browse/MJAR-99
> Project: Maven 2.x Jar Plugin
> Issue Type: Bug
> Components: sign
> Affects Versions: 2.2
> Environment: Maven 2.0.8, JRE 1.5, WindowsXP
> Reporter: Bryan Brouckaert
> Assignee: Benjamin Bentmann
>
> When running the first time or after an update it installes the signed jar.
> [INFO] [jar:sign {execution: default}]
> [INFO] [install:install]
> [INFO] Installing D:\Projects\CIN\MyCareNet\Portal\applet\target\signed\applet-0.3-SNAPSHOT.jar to D:\Downloads\Maven\be\cin\mycarenet\portal\applet\0.3-SNAPSHOT\applet-0.3-SNAPSHOT.jar
> The second run the signing is skipped (which is ok), but the unsigned jar in installed which isn't ok.
> [INFO] [jar:sign {execution: default}]
> [debug] jarsigner executable=[C:\Java\jdk1.5.0_14\jre\..\bin\jarsigner.exe]
> [debug] Executing: cmd.exe /X /C '"C:\Java\jdk1.5.0_14\jre\..\bin\jarsigner.exe -verify D:\Projects\CIN\MyCareNet\Portal\applet\target\signed\applet-0.3-SNAPSHOT.jar"'
> [info] jar verified.
> [INFO] JAR D:\Projects\CIN\MyCareNet\Portal\applet\target\signed\applet-0.3-SNAPSHOT.jar is already signed. Skipping.
> [INFO] [install:install]
> [INFO] Installing D:\Projects\CIN\MyCareNet\Portal\applet\target\applet-0.3-SNAPSHOT.jar to D:\Downloads\Maven\be\cin\mycarenet\portal\applet\0.3-SNAPSHOT\applet-0.3-SNAPSHOT.jar
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira