You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by bu...@apache.org on 2012/01/19 14:43:10 UTC

DO NOT REPLY [Bug 52489] New: Enhancement request for codesigning of war files

https://issues.apache.org/bugzilla/show_bug.cgi?id=52489

             Bug #: 52489
           Summary: Enhancement request for codesigning of war files
           Product: Tomcat 7
           Version: 7.0.23
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: enhancement
          Priority: P2
         Component: Catalina
        AssignedTo: dev@tomcat.apache.org
        ReportedBy: tomcatmailing@ttsecure.org
    Classification: Unclassified


Created attachment 28177
  --> https://issues.apache.org/bugzilla/attachment.cgi?id=28177
Patch for enabling signature support for .war files (signing classes under
/WEB-INF/classes/)

Hi,

while it is easy to run Tomcat with a security manager when the webapps are
included in /WEB-INF/lib/*.jar this is not possible right now when using files
under /WEB-INF/classes/. As I am in the situation of having to keep all classes
under /WEB-INF/classes/, I wrote a patch to add this capability for Tomcat. So
with this patch it is possible to sign a .war file and to have the classes
contained in the .war files signed and run correctly withing a Tomcat with
enabled security manager.

Currently only packed war files are supported (so uncompress in server.xml must
be false). Perhaps there is an easier way of getting the file name of the
original war file, enabling a support also for uncompressed .war files.

Attached is the patch file in diff -u format.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

DO NOT REPLY [Bug 52489] Enhancement request for code signing of war files

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=52489

Mark Thomas <ma...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #28177|0                           |1
           is patch|                            |
  Attachment #28177|application/octet-stream    |text/plain
          mime type|                            |

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

Re: DO NOT REPLY [Bug 52489] Enhancement request for code signing of war files

Posted by sebb <se...@gmail.com>.
On 19 January 2012 14:51,  <bu...@apache.org> wrote:
> https://issues.apache.org/bugzilla/show_bug.cgi?id=52489
>
> Sebb <se...@apache.org> changed:
>
>           What    |Removed                     |Added
> ----------------------------------------------------------------------------
>            Summary|Enhancement request for     |Enhancement request for
>                   |codesigning of war files    |code signing of war files

FYI:

codesigning was ambiguous: code signing or co-designing?

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

DO NOT REPLY [Bug 52489] Enhancement request for code signing of war files

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=52489

Sebb <se...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|Enhancement request for     |Enhancement request for
                   |codesigning of war files    |code signing of war files

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org