RFR 8221719: Jarsigner Fails To Verify Signed By Alias If Alias Given In Wrong Case

Philipp Kunz philipp.kunz at paratix.ch
Sat May 11 08:16:53 UTC 2019


Hi Max,

You are right. An explicit manifest is not necessary. I don't remember
why I added it in the first place. It works also without it.

Regards,
Philipp


On Thu, 2019-05-09 at 16:44 +0800, Weijun Wang wrote:
> Hi Philipp,
> 
> I've posted your patch at
> 
>    http://cr.openjdk.java.net/~weijun/8221719/webrev.00/
> 
> Everyone please take a review.
> 
> I think it looks fine. Just one question: why do you need to create
> the Manifest in the test. Can you just create a jar without
> MANIFEST.MF and let jarsigner add it?
> 
> Thanks,
> Max
> 
> > On May 1, 2019, at 10:14 PM, Philipp Kunz <philipp.kunz at paratix.ch>
> > wrote:
> > 
> > Hi Max and everyone,
> > 
> > With respect to the previous patch, parentheses moved from
> > storeHash to printCert, bug number added, and some comments added
> > and clarified.
> > 
> > Regards,
> > Philipp
> > 
> > 
> 
> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20190511/ce02d619/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 20190511-JavaKeyStoreAliasCaseInsensitive.patch
Type: text/x-patch
Size: 10517 bytes
Desc: not available
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20190511/ce02d619/20190511-JavaKeyStoreAliasCaseInsensitive.patch>


More information about the security-dev mailing list