Question: Checking the program code signature at startup.

[Freedom Dev]

I want my java installation to run only signed jar files (the 
certificate and signatures are stored in a separate manifest file which 
is located in META-INF)
I don't want to do code checking using console utilities
https://docs.oracle.com/javase/tutorial/deployment/jar/signindex.html
I want the signature to be checked when loading a class from a jar file; 
in the case of an unsigned/modified class, a type of SecurityException 
will be thrown.


Please tell me where to subscribe to the mailing list (email list) for 
java users?


On 14.02.2024 05:28, David Holmes wrote:
> On 14/02/2024 12:53 pm, Freedom Dev wrote:
>> I want to know if there is a code check at startup.
>> If so, how to enable it and what is needed for this.
>> I'm using java >=21 on a linux host
>
> What do you mean by "code check" and "code signature"?
>
> Note these mailing lists are people who are developing Java (OpenJDK) 
> not those using it.
>
> Regards,
> David
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mail.openjdk.org/pipermail/jdk-dev/attachments/20240214/c3ad1289/attachment.htm>