On Thu, 4 Nov 2004, Ivan Ivanov <[EMAIL PROTECTED]> wrote:

> Actually, there *is* a method called isSigned(File) that checks
> whether a jar is signed, so what you want *is* possible.

A signed jar contains the signature in a file named ALIAS.SF (ALIAS is
a placeholder here) inside of the META-INF directory.  All the code in
signjar does is checking for this file.

It doesn not check whether the file contains anything useful or the
signature is valid.

> not I am sure whether this method is in older versions of
> Ant.

Should have been in there for longer.  Let's see
<http://cvs.apache.org/viewcvs.cgi/ant/src/main/org/apache/tools/ant/taskdefs/SignJar.java?r1=1.7&r2=1.8>
has been added for Ant 1.4.

Stefan

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to