You are viewing a plain text version of this content. The canonical link for it is here.

Posted to users@tomcat.apache.org by Steve Conover <sg...@yahoo.com> on 2000/11/22 00:44:35 UTC

Fwd: signed war files

trying this again...

> Hi everyone,
> 
> I'd like to create a war, digitally sign it, and restrict tomcat to
> only executing code that's digitally signed by me.  Has anyone done
> this successfully?  How do I go about doing this?
> 
> Thanks,
> Steve


=====
********************************
Steve Conover Jr.
http://steve.dreamingtree.net
FAX: (309) 276-8942
********************************

__________________________________________________
Do You Yahoo!?
Yahoo! Shopping - Thousands of Stores. Millions of Products.
http://shopping.yahoo.com/

Re: Fwd: signed war files

Posted by "Craig R. McClanahan" <Cr...@eng.sun.com>.

Steve Conover wrote:

> trying this again...
>
> > Hi everyone,
> >
> > I'd like to create a war, digitally sign it, and restrict tomcat to
> > only executing code that's digitally signed by me.  Has anyone done
> > this successfully?  How do I go about doing this?
> >
> > Thanks,
> > Steve
>

Tomcat does not currently support any notion of checking for digital signatures
on web applications.  You would need to modify the code in Tomcat that deploys a
web application to check for this if you want to implement it.

> Steve Conover Jr.
>

Craig McClanahan