RFR 8056174: New APIs for jar signing

Weijun Wang weijun.wang at oracle.com
Mon Aug 24 13:56:57 UTC 2015


Hi All

Please review the code change at

   http://cr.openjdk.java.net/~weijun/8056174/webrev.02/

A new JarSigner public API is introduced to OpenJDK. The code change 
chooses a two-layer implementation style, with public JarSigner/Builder 
in jdk.security and private JarSignerX/BuilderX in sun.security. The 
private side contains some unpopular options which I hope can be used to 
implement the jarsigner tool itself in another changeset.

Some spec clarification is made since my last mail [1], including 
Builder#sign, JarSigner#getDigestAlg, and JarSigner#getSigAlg. In 
Builder, I am still using should method names (sigAlg, digestAlg, and 
tsa) since I think the jarsigner option names are already widely 
accepted. Otherwise, a name like setDigestAlgorithm seems a little 
unfamiliar.

Thanks
Max

[1] 
http://mail.openjdk.java.net/pipermail/security-dev/2015-August/012636.html



More information about the security-dev mailing list