[ http://jira.codehaus.org/browse/MNG-1130?page=all ]
Jerome Lacoste updated MNG-1130:
--------------------------------
Attachment: MNG-1130-jar-sign.diff
This is my current state of the implementation.
Things lacking:
- documentation
- unit tests. I've wondered what to implement. I believe I should just validate
commandline correctness. That sounds like the easiest to do.
Unfortunately that is currently a little bit too tight to the environment (we
resolve the full jarsigner path, and it is platform specific)
Another way would be to do more complex functional testing, like in the
netbeans mojo plugin, but in our case we generate a binary not a text file.
So validating the signed jar file could be done using "jarsigner -verify
-certs -verbose", but the resulting output needs a lot of parsing to be
validated (in particular date handling etc). Sounds like a lot of trouble.
I would then go for simple command line validation if noone has a better idea
- implementation is currently limited to keystore with keypass. Otherwise we
have the risk of jarsigner using System.in to ask for a password to the user.
The current implementation would hang. Better to avoid it.
> Support jar signing.
> --------------------
>
> Key: MNG-1130
> URL: http://jira.codehaus.org/browse/MNG-1130
> Project: Maven 2
> Type: New Feature
> Components: maven-jar-plugin
> Versions: 2.0-beta-3
> Environment: gentoo linux, jdk 1.4.2_06
> Reporter: Corridor Software Developer
> Attachments: MNG-1130-jar-sign.diff, mng-1130.tar.gz
>
>
> The Java webstart framework requires that jars used by a webstart application
> be signed.
> Create a new goal on the maven jar plugin called jar:sign. The goal would
> take a keystore file as input and sign the project artifact prior to
> installing it to the local repository or deploying it to the repo.
> The plugin should also allow a specific dependency or dependencies, as well
> as it's runtime dependencies to be signed.
> This functionality is required prior to finishing the webstart-maven-plugin.
> Two example test projects will be attached to the ticket shortly.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
