On Wed, Apr 6, 2011 at 14:29, Sebastian Biedermann
<[email protected]> wrote:
> Dear List,
>
> I´m searching for a integrity measurement module for apache tomcat which
> makes a hash (e.g. sha1) from each *.war file before starting/employing it.
>
> Can anyone give me a hint?
>
You can sign jars, so I guess you can sign wars and use the same tools
to check validity. But this means signing the war at build/package
time.
Otherwise you can just use whatever the system provides you with. I
don't know for Windows, but Linux has {md5,sha1,sha256}sum, etc etc.
--
Francis Galiegue
ONE2TEAM
Ingénieur système
Mob : +33 (0) 683 877 875
Tel : +33 (0) 178 945 552
[email protected]
40 avenue Raymond Poincaré
75116 Paris
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
