如何为 Java 8u141 签署 Java Webstart 应用程序? [英] How to sign Java Webstart application for Java 8u141?

问题描述

Oracle 似乎对 Java 7u45 进行了更改，需要设置新的清单值才能运行签名的 Java Webstart 应用程序(请参阅 此处).

It looks like there has been a change by Oracle similar to Java 7u45, where new manifest values needed to be set to run signed Java Webstart applications (see here).

目前我们使用 Java 8u131 签名的应用程序不以 Java8u141 启动并显示错误消息 无法验证登录资源:(任意资源.jar)

Currently our signed application working with Java 8u131 does not start with Java8u141 with error message Could not verify signing in resource: (arbitrary resource.jar)

您是否仍然可以使用 Java 8u141 运行您已签名的 Webstart 应用程序，即我有什么特殊问题吗?

Can you still run your signed Webstart application with Java 8u141, i.e. do I have a special problem?

在发行说明中是对安全更改，但它们看起来与代码签名无关.另外 crypto roadmap 看起来这个版本并没有真正改变代码签名，尽管例如 Java 8u131，其中删除了 MD5 支持.但是 Java 8u131 对我有用，Maven Java Webstart 插件也使用 SHA-256-Digest.

In the release notes is a note to security changes, but they don't look related to code signing. Also crypto roadmap looks like this release has not really changed code signing, despite Java 8u131 for example, where MD5 support was removed. But Java 8u131 is working for me and Maven Java Webstart Plugin also uses SHA-256-Digest.

推荐答案

我已经找到了解决方案或更确切地说是解决问题的方法.在我们的例子中，有问题的 jar 是 commons-httpclient-3.1.jar.清单包含以下条目

I have found a solution or more exactly a work-around to the problem. The jar in question was in our case the commons-httpclient-3.1.jar. The manifest contains the following entry

Name: org/apache/commons/httpclient

我在最后添加了一个/，然后我签署并重新部署了应用程序.

I added a / at the end and then I signed and re-deployed the application.

Name: org/apache/commons/httpclient/

这次 web start 应用程序启动时没有任何问题.在这两种情况下，jar 都是用 java 8u141 签名的，jarsigner 可以验证 jar，但是 webstart 在第一种情况下没有启动.在我看来，这是一个 webstart 错误.

This time the web start application started without any issues. In both cases the jar was signed with java 8u141, the jarsigner could verify the jar, but the webstart did not start in the first case. In my opinion this is a webstart bug.

这篇关于如何为 Java 8u141 签署 Java Webstart 应用程序?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！