Signed JCE and providers jars

David Penick dpenick at gmail.com
Mon Feb 4 10:08:05 UTC 2019


I’ve downloaded OpenJDK builds from AdoptOpenJDK and Azul Zulu, and I’ve
noticed that the jce.jar, sunjce_provider.jar and sunpkcs11.jar jar files
do not appear to be signed. I’m surprised they work without being signed,
but I also haven’t been able to find anyone asking how to get signed
versions of the Sun JCE.



How can I get signed versions of the Sun JCE jars, or should I not worry
about it, and if so, why not?



Thanks,

David
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mail.openjdk.java.net/pipermail/security-dev/attachments/20190204/a60b5064/attachment.html>


More information about the security-dev mailing list