RFR: 8341775: Duplicate manifest files are removed by jarsigner after signing

Kevin Driver kdriver at openjdk.org
Thu Jan 2 15:44:35 UTC 2025


On Mon, 2 Dec 2024 21:30:27 GMT, Weijun Wang <weijun at openjdk.org> wrote:

> 1. The warning should only be shown by the `jarsigner` tool. `JarSigner` is an API and should not write to `System.err`.

@wangweij: See the note that is part of the PR description. I've copied it below for convenience: 

--8<--
**Note**: We cannot (so far) pass whether the verbose flag is set to the class that does this processing. We may want to add a property to the builder for this. As-is, the message will be printed via System.err whether verbose is set or not.
--8<--

AFAICT, there isn't a way to access the tool's logging/output mechanism currently. I'm ok to add one -- it's just not in the current scope of the fix.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/22222#issuecomment-2567969721


More information about the security-dev mailing list