[
https://jira.codehaus.org/browse/MWEBSTART-2?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=282559#comment-282559
]
Tony Chemit commented on MWEBSTART-2:
-------------------------------------
Extensions were introduce to deal with already signed dependencies, but I thnik
this make the usage of the pack200 a bit messy, we should have a better look to
this point.
Anyway once this done, can I close this issue or is there someone that has
something to propose ?
> [webstart] Pack200 shouldn't effect the original jar files.
> -----------------------------------------------------------
>
> Key: MWEBSTART-2
> URL: https://jira.codehaus.org/browse/MWEBSTART-2
> Project: Maven 2.x Webstart Plugin
> Issue Type: Improvement
> Components: pack
> Reporter: David Boden
> Assignee: Jerome Lacoste
> Fix For: 1.0-beta-3
>
> Attachments: patch.txt
>
>
> When creating a webstart artifact, the pack200 process shouldn't effect the
> original jars. (if someone disagrees with this then please feel free to
> comment!)
> Packing and unpacking using the pack200 process results in a smaller jar with
> some of the class files' internal information removed. This may result in
> unpredictable behaviour when using clients that don't support pack200 at all.
> I've attached a patch where I've tried to separate the pack200 process
> completely from the signing of the original jar files.
> The patch also aims to solve the problems of signing webstart jar files that
> are already signed by a 3rd party certificate. This causes problems with
> pack200 because packing a file ruins the digital signature by virtue of
> changing the class files. I've failed in this regard because jarsigner
> doesn't seem to give you a way of checking whether a jar is already signed
> correctly. It doesn't differentiate between an unsigned jar and an invalid
> manifest format.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe from this list, please visit:
http://xircles.codehaus.org/manage_email
