signing failure with keystore alias containing single-quote character ---------------------------------------------------------------------
Key: MJARSIGNER-11 URL: http://jira.codehaus.org/browse/MJARSIGNER-11 Project: Maven 2.x Jar Signer Plugin Issue Type: Bug Affects Versions: 1.2 Environment: Mac OSX 10.5.8 java version "1.6.0_22" Reporter: Jason Thrasher If a keystore is used with an alias that contains a single quote character, the maven-jarsigner-plugin fails to build a proper command line. This is because the alias field in the jarsigner argument contains a quote character that is not escaped. Alias names with a single quote are considered valid, therefore the maven-jarsigner-plugin isn't handling this input correctly. Plugin error message when alias with a single quote is encountered: [...SNIP] [WARNING] /bin/sh: -c: line 0: unexpected EOF while looking for matching `'' [WARNING] /bin/sh: -c: line 1: syntax error: unexpected end of file [...SNIP...] [INFO] ------------------------------------------------------------------------ [ERROR] BUILD ERROR [INFO] ------------------------------------------------------------------------ [INFO] Failed executing '/bin/sh -c cd /Users/jason/Documents/dev/bitmenu/trunk/app/dlapplet && /System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Home/bin/jarsigner -verbose -tsa http://tsa.starfieldtech.com -keystore /Users/jason/Documents/bitmenu/certs/bitmenu-codesigning-comodo.p12 -storepass ''*****'' -storetype PKCS12 /Users/jason/Documents/dev/bitmenu/trunk/app/dlapplet/target/bitmenu-dlapplet-1.4.0-SNAPSHOT.jar 'bitmenu, inc.'s the usertrust network id'' - exitcode 2 Note: PKCS12 files created with Comodo's code signing system may have aliases with a single quote like this. === possible workaround === Export the cert and the key, then re-import them to a new pkcs12 file with a different alias. # to reset the alias name in a pkcs12 file openssl pkcs12 -in myComodo.p12 -out myComodo-keys.pem -nodes -nocerts openssl pkcs12 -in myComodo.p12 -out myComodo-certs.pem -nodes -nokeys openssl pkcs12 -export -in myComodo-certs.pem -inkey myComodo-keys.pem -out myComodo-new.p12 -name "myalias" -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira