Signed JCE and providers jars

[David Penick]

I’ve downloaded OpenJDK builds from AdoptOpenJDK and Azul Zulu, and I’ve
noticed that the jce.jar, sunjce_provider.jar and sunpkcs11.jar jar files
do not appear to be signed. I’m surprised they work without being signed,
but I also haven’t been able to find anyone asking how to get signed
versions of the Sun JCE.



How can I get signed versions of the Sun JCE jars, or should I not worry
about it, and if so, why not?



Thanks,

David
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20190204/a60b5064/attachment.htm>