You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@maven.apache.org by "Geoffrey De Smet (JIRA)" <ji...@codehaus.org> on 2006/01/26 11:52:06 UTC
[jira] Commented: (MASSEMBLY-64) jar-with-dependencies has a
last-one-copies-wins policy which can fail signed jars
[ http://jira.codehaus.org/browse/MASSEMBLY-64?page=comments#action_56992 ]
Geoffrey De Smet commented on MASSEMBLY-64:
-------------------------------------------
Found a fix:
exclude
/META-INF/*.RSA
/META-INF/*.SF
/META-INF/*.rsa
/META-INF/*.sf
Problem solved.
Please note that the fact that acegi (and some of the sun jars) are signed also gives problems with the webstart plugin.
> jar-with-dependencies has a last-one-copies-wins policy which can fail signed jars
> ----------------------------------------------------------------------------------
>
> Key: MASSEMBLY-64
> URL: http://jira.codehaus.org/browse/MASSEMBLY-64
> Project: Maven 2.x Assembly Plugin
> Type: Bug
> Versions: 2.0.1
> Reporter: Geoffrey De Smet
> Fix For: 2.1
>
>
> I've configured the plugins like this:
> <plugin>
> <groupId>org.apache.maven.plugins</groupId>
> <artifactId>maven-jar-plugin</artifactId>
> <configuration>
> <archive>
> <manifest>
> <mainClass>ggg.GGGStandaloneApp</mainClass>
> <addClasspath>true</addClasspath>
> </manifest>
> </archive>
> </configuration>
> </plugin>
> <plugin>
> <artifactId>maven-assembly-plugin</artifactId>
> <configuration>
> <descriptorId>jar-with-dependencies</descriptorId>
> <archive> <!-- Please document this -->
> <manifest>
> <mainClass>ggg.GGGStandaloneApp</mainClass>
> </manifest>
> </archive>
> </configuration>
> </plugin>
> BTW: Please document the archive option in the assembly plugin on the assembly site, it took me a while of trial and error to find it.
> However the application doesn't work yet, because:
> Exception in thread "main" java.lang.SecurityException: no manifiest section for signature file entry javax/activation/D
> ataContentHandlerFactory.class
> at sun.security.util.SignatureFileVerifier.verifySection(Unknown Source)
> at sun.security.util.SignatureFileVerifier.processImpl(Unknown Source)
> at sun.security.util.SignatureFileVerifier.process(Unknown Source)
> at java.util.jar.JarVerifier.processEntry(Unknown Source)
> ...
> It looks like it's because the everything in the META-INF directory have a last-one-copied-wins policy.
> Jar-jar would also solve this of course.
> PS: I am also using acegisecurity, so I belive you can replicate this issue by making an assembly of a HelloWorld dependend on acegi & activation.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org