Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8309841 Jarsigner should print a warning if an entry is removed
  3. JDK-8334260

Release Note: Jarsigner Should Print a Warning If an Entry Is Removed

XMLWordPrintable

    • Icon: Sub-task Sub-task
    • Resolution: Delivered
    • Icon: P4 P4
    • 24
    • 8u461, 11.0.28-oracle, 17.0.16-oracle, 21.0.8-oracle, 24
    • security-libs

        If an entry is removed from a signed JAR file, there is no mechanism to detect that it has been removed using the `JarFile` API, since the `getJarEntry` method returns `null` as if the entry had never existed. With this change, the `jarsigner -verify` command analyzes the signature files and if some sections do not have matching file entries, it prints out the following warning: "This JAR contains signed entries for files that do not exist". Users can further find out the names of these entries by adding the `-verbose` option to the command.

              weijun Weijun Wang
              weijun Weijun Wang
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: