Re: Signing Java Jars, versus Apache Signing of distributed artifacts

2007-08-21 Thread Curt Arnold
I'm looking for a resolution to this also. Chainsaw (a log file viewer from the Logging Services project) has been available via WebStart from the Logging Services web site for several years but is signed by one of the developer's personal certificates. It doesn't seem to fit within the

Re: Signing Java Jars, versus Apache Signing of distributed artifacts

2007-08-20 Thread Craig L Russell
Hi Marshall, When I looked into Java signing and found it to be too burdensome. There are two basic issues with it that made me think that it wasn't suitable for use with Apache projects: 1. The certificates are the keys to the kingdom. Whoever has the ability to use the certificates

Re: Signing Java Jars, versus Apache Signing of distributed artifacts

2007-08-20 Thread Marshall Schor
Craig L Russell wrote: Hi Marshall, When I looked into Java signing and found it to be too burdensome. There are two basic issues with it that made me think that it wasn't suitable for use with Apache projects: 1. The certificates are the keys to the kingdom. Whoever has the ability to use