RFR 8056174: New APIs for jar signing
Weijun Wang
weijun.wang at oracle.com
Mon Aug 24 13:56:57 UTC 2015
Hi All
Please review the code change at
http://cr.openjdk.java.net/~weijun/8056174/webrev.02/
A new JarSigner public API is introduced to OpenJDK. The code change
chooses a two-layer implementation style, with public JarSigner/Builder
in jdk.security and private JarSignerX/BuilderX in sun.security. The
private side contains some unpopular options which I hope can be used to
implement the jarsigner tool itself in another changeset.
Some spec clarification is made since my last mail [1], including
Builder#sign, JarSigner#getDigestAlg, and JarSigner#getSigAlg. In
Builder, I am still using should method names (sigAlg, digestAlg, and
tsa) since I think the jarsigner option names are already widely
accepted. Otherwise, a name like setDigestAlgorithm seems a little
unfamiliar.
Thanks
Max
[1]
http://mail.openjdk.java.net/pipermail/security-dev/2015-August/012636.html
More information about the security-dev
mailing list