The example in the class summary of jdk.security.jarsigner.JarSigner uses SHA-1 and SHA1withDSA, which are considered weak algorithms. This should be changed to something stronger such as SHA-256 and SHA256withRSA.