RFR 8056174: New APIs for jar signing
Weijun Wang
weijun.wang at oracle.com
Tue Sep 1 06:50:52 UTC 2015
Updated a little: rewrite of jarsigner tool itself using the JarSigner
API included. Still at the same URL below.
--Max
On 08/24/2015 09:56 PM, Weijun Wang wrote:
> Hi All
>
> Please review the code change at
>
> http://cr.openjdk.java.net/~weijun/8056174/webrev.02/
>
> A new JarSigner public API is introduced to OpenJDK. The code change
> chooses a two-layer implementation style, with public JarSigner/Builder
> in jdk.security and private JarSignerX/BuilderX in sun.security. The
> private side contains some unpopular options which I hope can be used to
> implement the jarsigner tool itself in another changeset.
>
> Some spec clarification is made since my last mail [1], including
> Builder#sign, JarSigner#getDigestAlg, and JarSigner#getSigAlg. In
> Builder, I am still using short method names (sigAlg, digestAlg, and
> tsa) since I think the jarsigner option names are already widely
> accepted. Otherwise, a name like setDigestAlgorithm seems a little
> unfamiliar.
>
> Thanks
> Max
>
> [1]
> http://mail.openjdk.java.net/pipermail/security-dev/2015-August/012636.html
More information about the security-dev
mailing list