You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@maven.apache.org by "Jerome Lacoste (JIRA)" <ji...@codehaus.org> on 2006/04/13 07:40:48 UTC

[jira] Commented: (MJAR-18) JarSignVerifyMojo - Handle unsigned jar files

    [ http://jira.codehaus.org/browse/MJAR-18?page=comments#action_63466 ] 

Jerome Lacoste commented on MJAR-18:
------------------------------------

David, there's an option in the JarSignMojo to verify or not a signature after the signing was done. I am not yet aware of anyone using the verify mojo on its own (outside of the JarSignMojo).

Should I understand from this request that you want to use the verify mojo on its own, maybe to verify a particular set of jars in a directory?

What is your exact use case?

> JarSignVerifyMojo - Handle unsigned jar files
> ---------------------------------------------
>
>          Key: MJAR-18
>          URL: http://jira.codehaus.org/browse/MJAR-18
>      Project: Maven 2.x Jar Plugin
>         Type: Improvement

>     Versions: 2.1
>     Reporter: David Boden

>
>
> The Mojo searches for the string:
> jar verified.
> If it doesn't find this string in the output, it throws a MojoExecutionException.
> However, what about the case where the jar is unsigned. The string that the jarsigner tool outputs is:
> jar is unsigned. (signatures missing or not parsable)
> How about an option to ignore unsigned jar files?

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira