RFR: 8341775: Duplicate manifest files are removed by jarsigner after signing
Kevin Driver
kdriver at openjdk.org
Thu Jan 2 15:44:35 UTC 2025
On Mon, 2 Dec 2024 21:30:27 GMT, Weijun Wang <weijun at openjdk.org> wrote:
> 1. The warning should only be shown by the `jarsigner` tool. `JarSigner` is an API and should not write to `System.err`.
@wangweij: See the note that is part of the PR description. I've copied it below for convenience:
--8<--
**Note**: We cannot (so far) pass whether the verbose flag is set to the class that does this processing. We may want to add a property to the builder for this. As-is, the message will be printed via System.err whether verbose is set or not.
--8<--
AFAICT, there isn't a way to access the tool's logging/output mechanism currently. I'm ok to add one -- it's just not in the current scope of the fix.
-------------
PR Comment: https://git.openjdk.org/jdk/pull/22222#issuecomment-2567969721
More information about the security-dev
mailing list