Directories are not signed in a signed jar. This should be taken into account when using jarsigner to verify a signed jar so the warning about unsigned entries should not show up when all non-directory and non-signature-related entries are signed.