Module jdk.jartool should provide jarsigner tool

Alan Bateman Alan.Bateman at oracle.com
Thu Feb 4 10:36:14 UTC 2021


On 04/02/2021 07:38, Christian Stein wrote:
> Module jdk.jartoo already provides java.util.spi.ToolProvider with
> sun.tools.jar.JarToolProvider. [0]
>
> Is there a reason why it does provide a JarSignerToolProvider allowing
> `jarsigner` to be run in-process? Perhaps too many System.exit() calls
> in sun/security/tools/jarsigner/Main.java?
>
>
cc'ing security-dev as that is where the jarsigner tool is maintained.

This may have come up in JDK 9 but I can't find any mails in the 
archives. Yes, it would need a bit of refactoring so that the 
System.exit is only called when invoked via the launcher/main method. 
There are also CLI options that prompt for a password that may not be 
suitable for programmatic use. I'm sure Max or others on security-dev 
will have more to say on this.

-Alan


More information about the security-dev mailing list