You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@ant.apache.org by bu...@apache.org on 2009/03/23 16:07:32 UTC

DO NOT REPLY [Bug 46891] New: SignJar Task: possibility to force signing of already signed jars

https://issues.apache.org/bugzilla/show_bug.cgi?id=46891

           Summary: SignJar Task: possibility to force signing of already
                    signed jars
           Product: Ant
           Version: unspecified
          Platform: PC
        OS/Version: All
            Status: NEW
          Severity: major
          Priority: P2
         Component: Core tasks
        AssignedTo: notifications@ant.apache.org
        ReportedBy: jisl@oksystem.cz


Created an attachment (id=23398)
 --> (https://issues.apache.org/bugzilla/attachment.cgi?id=23398)
Patch for adding forceSign property to force signing of already signed jars

For Java Webstart applications is crucial to sign all jars in package with one
certificate to avoid dialog asking user for granting right for included
libraries. For each library the certificate can be different or missing and
that can cause problems with running Java Webstart application.

For avoiding this problems, we need to sign all jars in package with provider's
certificate including already signed jars.

Attached patch creates new boolean property forceSign, which defaults to false
- previous behavior. When is set to true, method isUpToDate returns false and
JAR is then signed with provided certificate.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

DO NOT REPLY [Bug 46891] SignJar Task: possibility to force signing of already signed jars

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=46891





--- Comment #3 from Stefan Bodewig <bo...@apache.org>  2009-04-09 08:00:23 PST ---
no date set, not even a release plan yet, so it is save to assume Ant 1.8.0 is
still a few months away.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

DO NOT REPLY [Bug 46891] SignJar Task: possibility to force signing of already signed jars

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=46891


Stefan Bodewig <bo...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
           Platform|PC                          |All
            Version|unspecified                 |1.7.1
         Resolution|                            |FIXED
   Target Milestone|---                         |1.8.0
           Severity|major                       |enhancement




--- Comment #1 from Stefan Bodewig <bo...@apache.org>  2009-04-09 07:18:14 PST ---
I used force instead of forceSign in svn revision 763661 ( https://svn.apache.org/viewcvs.cgi?view=rev&rev=763661 )

If you want to expand on the documentation I've added or add a testcase, that
would be great.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

DO NOT REPLY [Bug 46891] SignJar Task: possibility to force signing of already signed jars

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=46891





--- Comment #2 from Pavel Jisl <ji...@oksystem.cz>  2009-04-09 07:53:31 PST ---
Thanks for resolving and fixing! I think, description is fine.

I have one more question. Is there any date, when the Ant 1.8.0 or some
milestone will be released? On Ant wiki and webpage, there is no date
specified.

Thanks for this information.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.