Module jdk.jartool should provide jarsigner tool
Alan Bateman
Alan.Bateman at oracle.com
Thu Feb 4 10:36:14 UTC 2021
On 04/02/2021 07:38, Christian Stein wrote:
> Module jdk.jartoo already provides java.util.spi.ToolProvider with
> sun.tools.jar.JarToolProvider. [0]
>
> Is there a reason why it does provide a JarSignerToolProvider allowing
> `jarsigner` to be run in-process? Perhaps too many System.exit() calls
> in sun/security/tools/jarsigner/Main.java?
>
>
cc'ing security-dev as that is where the jarsigner tool is maintained.
This may have come up in JDK 9 but I can't find any mails in the
archives. Yes, it would need a bit of refactoring so that the
System.exit is only called when invoked via the launcher/main method.
There are also CLI options that prompt for a password that may not be
suitable for programmatic use. I'm sure Max or others on security-dev
will have more to say on this.
-Alan
More information about the security-dev
mailing list