RFR: 8215788: Clarify JarInputStream Manifest access [v7]

Alan Bateman alanb at openjdk.org
Tue Sep 20 07:00:44 UTC 2022


On Mon, 19 Sep 2022 10:21:30 GMT, Lance Andersen <lancea at openjdk.org> wrote:

> OK, will make another pass at this today

I looked at the latest draft (2bafc00c). I think it would help if the section "Verifying a JarInputStream" were renamed to "Signed JAR files".  The link to getManifest makes the reader wonder if they have to call this method whereas I think what you want to say that the manifest must be at the start of the stream (as per the first section) and then followed by signature entries.

-------------

PR: https://git.openjdk.org/jdk/pull/10045


More information about the core-libs-dev mailing list