NPE in jarsigner -verify for broken TSA

[Bernd Eckenfels]

Hello,

Just a little update, after implementing a jarsigner -verify after each sign operation and by retrying signatures when it fails, we could resolve the problem, when signing 50 jars one or two failed with NullPointer and worked after immediate retry.

Gruss
Bernd
--
https://bernd.eckenfels.net<http://bernd.eckenfels.net>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20200725/ac1216a6/attachment.htm>