Mailinglist Archive: opensuse-java (8 mails)

[Kirill Kirillov <kirill.kirillov@xxxxxxxxx>]

В Пнд, 09/06/2008 в 09:55 +0200, Roberto Mannai пишет:

> about signing jars, my project signed them, so it is possibile :) ;
> I'm using the following ant task:
>
>               <!-- signing to use as a Java Web Start application -->
>               <signjar keystore="${src}/../myKeystore"
>                       jar="${dist}\java2demo.jar"
>                       alias="www.codesounding.org"
>                   storepass="XYZ"
>               />
>
> See 
> https://build.opensuse.org/package/show?package=codesounding&project=home%3Arobermann79-

IMHO, it's not a secure solution, because by providing access to this
build.xml with password, anyone can build modified xxx.jar and sign it
with official signature and therefore it'll become useless. Am I wrong?

Kirill.

-- 
To unsubscribe, e-mail: opensuse-java+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-java+help@xxxxxxxxxxxx