如何为Java 8u141签署Java Webstart应用程序？ [英] How to sign Java Webstart application for Java 8u141?

问题描述

看起来Oracle已经发生了类似于Java 7u45的更改，其中需要设置新的清单值来运行签名的Java Webstart应用程序（请参阅这里）。

It looks like there has been a change by Oracle similar to Java 7u45, where new manifest values needed to be set to run signed Java Webstart applications (see here).

目前我们的签名应用程序使用Java 8u131不能从Java8u141开始，错误消息无法验证资源中的签名:(任意resource.jar）

Currently our signed application working with Java 8u131 does not start with Java8u141 with error message Could not verify signing in resource: (arbitrary resource.jar)

你能来吗？仍然使用Java 8u141运行您签名的Webstart应用程序，即我是否有特殊问题？

Can you still run your signed Webstart application with Java 8u141, i.e. do I have a special problem?

在发行说明是对安全性更改的说明，但它们与代码签名无关。另外加密路线图看起来这个版本并没有真正改变代码签名，尽管例如，Java 8u131，其中删除了MD5支持。但是Java 8u131对我有用，Maven Java Webstart插件也使用SHA-256-Digest。

In the release notes is a note to security changes, but they don't look related to code signing. Also crypto roadmap looks like this release has not really changed code signing, despite Java 8u131 for example, where MD5 support was removed. But Java 8u131 is working for me and Maven Java Webstart Plugin also uses SHA-256-Digest.

推荐答案

我找到了解决方案或者更确切地说是解决问题的方法。有问题的jar在我们的例子中是commons-httpclient-3.1.jar。清单包含以下条目

I have found a solution or more exactly a work-around to the problem. The jar in question was in our case the commons-httpclient-3.1.jar. The manifest contains the following entry

Name: org/apache/commons/httpclient

我在最后添加了一个/然后我签名并重新部署了该应用程序。

I added a / at the end and then I signed and re-deployed the application.

Name: org/apache/commons/httpclient/

这次Web启动应用程序启动没有任何问题。在这两种情况下，jar都是用java 8u141签名的，jarsigner可以验证jar，但是webstart没有在第一种情况下启动。在我看来，这是一个webstart错误。

This time the web start application started without any issues. In both cases the jar was signed with java 8u141, the jarsigner could verify the jar, but the webstart did not start in the first case. In my opinion this is a webstart bug.

这篇关于如何为Java 8u141签署Java Webstart应用程序？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！