RFR 8056174: New APIs for jar signing

Weijun Wang weijun.wang at oracle.com
Tue Sep 1 06:50:52 UTC 2015


Updated a little: rewrite of jarsigner tool itself using the JarSigner 
API included. Still at the same URL below.

--Max

On 08/24/2015 09:56 PM, Weijun Wang wrote:
> Hi All
>
> Please review the code change at
>
>    http://cr.openjdk.java.net/~weijun/8056174/webrev.02/
>
> A new JarSigner public API is introduced to OpenJDK. The code change
> chooses a two-layer implementation style, with public JarSigner/Builder
> in jdk.security and private JarSignerX/BuilderX in sun.security. The
> private side contains some unpopular options which I hope can be used to
> implement the jarsigner tool itself in another changeset.
>
> Some spec clarification is made since my last mail [1], including
> Builder#sign, JarSigner#getDigestAlg, and JarSigner#getSigAlg. In
> Builder, I am still using short method names (sigAlg, digestAlg, and
> tsa) since I think the jarsigner option names are already widely
> accepted. Otherwise, a name like setDigestAlgorithm seems a little
> unfamiliar.
>
> Thanks
> Max
>
> [1]
> http://mail.openjdk.java.net/pipermail/security-dev/2015-August/012636.html



More information about the security-dev mailing list