On Fri, Nov 5, 2010 at 12:52 PM, Milan Cvetanovic <
[email protected]> wrote:

>  Hi,
>
> I have one issue with your excellent maven web start plugin.
>
> Scenario:
> 1. We use jconn-3.6.05.jar which is obfuscated as I noticed (see attached
> file).
> 2. We use pack200 to compress java web start .jar files.
>
> jconn-3.6.05.jar in first step is normalized (repacked by pack200) before
> signing process. After pack200 normalization it fail to sign. I think that
> this happens because .jar file is obfuscated.
>
> *Is there any way to tell plugin to exclude some .jar file from pack200
> process, just to do sign process?*
>
> Here is the console log:
>
>  [debug] jarsigner executable=[C:\Program
> Files\Java\jdk1.6.0_18\jre\..\bin\jarsigner.exe]
> [debug] Executing: cmd.exe /X /C '""C:\Program
> Files\Java\jdk1.6.0_18\jre\..\bin\jarsigner.exe" -verify -verbose
> C:\dev\java\BIApp\target\jnlp\jconn-3.6.05.jar"'
> [info] jarsigner: java.lang.SecurityException: SHA-1 digest error for
> com/sybase/jdbc3/jdbc/Const.class
> [INFO]
> ------------------------------------------------------------------------
> [INFO] BUILD FAILURE
> [INFO]
> ------------------------------------------------------------------------
> [INFO] Total time: 13:58.809s
> [INFO] Finished at: Fri Nov 05 12:13:23 CET 2010
> [INFO] Final Memory: 238M/247M
> [INFO]
> ------------------------------------------------------------------------
> [ERROR] Failed to execute goal
> org.codehaus.mojo.webstart:webstart-maven-plugin:1.0-alpha-2:jnlp
> (default-cli) on project BIApp: Result of cmd.exe /X /C '""C:\Program
> Files\Java\jdk1.6.0_18\jre\..\bin\jarsigner.exe" -verify -verbose
> C:\dev\java\BIApp\target\jnlp\jconn-3.6.05.jar"' execution is: '1'. -> [Help
> 1]
> [ERROR]
> [ERROR] To see the full stack trace of the errors, re-run Maven with the -e
> switch.
> [ERROR] Re-run Maven using the -X switch to enable full debug logging.
> [ERROR]
> [ERROR] For more information about the errors and possible solutions,
> please read the following articles:
> [ERROR] [Help 1]
> http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException
>
> Best Regards,
> Milan Cvetanovic
>

Milan

1- always add u...@mojo, when mailing developers
2- your issue is well described here:
http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6351684

The jar files have to be normalized (also called repacked) before signing.

You can probably add the proper options to pack200 for the jar to be
repacked ( http://wiki.eclipse.org/Pack200 )

I am not sure the pack200 anttasks used in the webstart project support the
proper options.
And they will be hard to modify. Maybe we should switch to these one:
http://www.matthiasmann.de/content/view/20/26/

J

Reply via email to