Signed JCE and providers jars

David Penick dpenick at
Mon Feb 4 10:08:05 UTC 2019

I’ve downloaded OpenJDK builds from AdoptOpenJDK and Azul Zulu, and I’ve
noticed that the jce.jar, sunjce_provider.jar and sunpkcs11.jar jar files
do not appear to be signed. I’m surprised they work without being signed,
but I also haven’t been able to find anyone asking how to get signed
versions of the Sun JCE.

How can I get signed versions of the Sun JCE jars, or should I not worry
about it, and if so, why not?


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the security-dev mailing list