[ 
https://issues.apache.org/jira/browse/MJARSIGNER-54?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Robert Scholte updated MJARSIGNER-54:
-------------------------------------
    Description: 
Some jars in the <archiveDirectory> are signed twice, while others are not 
signed at all. Here is the pom snipped with the plugin configuration:

{code:xml}
                        <plugin>
                                <groupId>org.apache.maven.plugins</groupId>
                                <artifactId>maven-jarsigner-plugin</artifactId>
                                <version>1.4</version>
                                <executions>
                                        <execution>
                                                <id>sign</id>
                                                <phase>prepare-package</phase>
                                                <goals>
                                                        <goal>sign</goal>
                                                </goals>
                                                <configuration>
                                                        
<alias>mirthconnect</alias>
                                                        
<sigfile>SERVER</sigfile>
                                                        
<keystore>src/main/resources/keystore.jks</keystore>
                                                        <keypass>xxxxx</keypass>
                                                        
<storepass>xxxxx</storepass>
                                                        
<storetype>JCEKS</storetype>
                                                        
<tsa>http://sha256timestamp.ws.symantec.com/sha256/timestamp</tsa>
                                                        <arguments>
                                                                
<argument>-sigalg</argument><argument>SHA256withRSA</argument>
                                                        </arguments>
                                                        <verbose>true</verbose>
                                                        
<archiveDirectory>target/jars</archiveDirectory>
                                                </configuration>
                                        </execution>
                                </executions>
                        </plugin>
{code}

  was:
Some jars in the <archiveDirectory> are signed twice, while others are not 
signed at all. Here is the pom snipped with the plugin configuration:

                        <plugin>
                                <groupId>org.apache.maven.plugins</groupId>
                                <artifactId>maven-jarsigner-plugin</artifactId>
                                <version>1.4</version>
                                <executions>
                                        <execution>
                                                <id>sign</id>
                                                <phase>prepare-package</phase>
                                                <goals>
                                                        <goal>sign</goal>
                                                </goals>
                                                <configuration>
                                                        
<alias>mirthconnect</alias>
                                                        
<sigfile>SERVER</sigfile>
                                                        
<keystore>src/main/resources/keystore.jks</keystore>
                                                        <keypass>xxxxx</keypass>
                                                        
<storepass>xxxxx</storepass>
                                                        
<storetype>JCEKS</storetype>
                                                        
<tsa>http://sha256timestamp.ws.symantec.com/sha256/timestamp</tsa>
                                                        <arguments>
                                                                
<argument>-sigalg</argument><argument>SHA256withRSA</argument>
                                                        </arguments>
                                                        <verbose>true</verbose>
                                                        
<archiveDirectory>target/jars</archiveDirectory>
                                                </configuration>
                                        </execution>
                                </executions>
                        </plugin>



> Some jars in the <archiveDirectory> are signed twice or not signed at all
> -------------------------------------------------------------------------
>
>                 Key: MJARSIGNER-54
>                 URL: https://issues.apache.org/jira/browse/MJARSIGNER-54
>             Project: Maven Jar Signer Plugin
>          Issue Type: Bug
>    Affects Versions: 1.4
>         Environment: Tested in eclipse/windows10 and jenkins/centos6
>            Reporter: Pablo León
>            Priority: Major
>
> Some jars in the <archiveDirectory> are signed twice, while others are not 
> signed at all. Here is the pom snipped with the plugin configuration:
> {code:xml}
>                       <plugin>
>                               <groupId>org.apache.maven.plugins</groupId>
>                               <artifactId>maven-jarsigner-plugin</artifactId>
>                               <version>1.4</version>
>                               <executions>
>                                       <execution>
>                                               <id>sign</id>
>                                               <phase>prepare-package</phase>
>                                               <goals>
>                                                       <goal>sign</goal>
>                                               </goals>
>                                               <configuration>
>                                                       
> <alias>mirthconnect</alias>
>                                                       
> <sigfile>SERVER</sigfile>
>                                                       
> <keystore>src/main/resources/keystore.jks</keystore>
>                                                       <keypass>xxxxx</keypass>
>                                                       
> <storepass>xxxxx</storepass>
>                                                       
> <storetype>JCEKS</storetype>
>                                                       
> <tsa>http://sha256timestamp.ws.symantec.com/sha256/timestamp</tsa>
>                                                       <arguments>
>                                                               
> <argument>-sigalg</argument><argument>SHA256withRSA</argument>
>                                                       </arguments>
>                                                       <verbose>true</verbose>
>                                                       
> <archiveDirectory>target/jars</archiveDirectory>
>                                               </configuration>
>                                       </execution>
>                               </executions>
>                       </plugin>
> {code}



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to