Re: [9] Review request: JDK-8169443 Deprecate Java Packager Blob Signing

2016-12-13 Thread Chris Bensen
The “new” was introduced for some reason in JDK 1.8 documentation but this has been there since JDK 1.0 documentation which I can’t find but it’s also there since JDK 2.0 [1]. The deployment guide will be updated. Chris [1]

Re: [9] Review request: JDK-8169443 Deprecate Java Packager Blob Signing

2016-12-13 Thread Stefan Fuchs
Well, in Java 8 is part of the javafx_ant_task reference [1] and advertised as being the new and more efficient way to sign jars [2] Anyway, perhaps the deprecation message for could be enhanced to point to https://ant.apache.org/manual/Tasks/signjar.html as the recommended way to sign jars.

Re: [9] Review request: JDK-8169443 Deprecate Java Packager Blob Signing

2016-12-13 Thread David DeHaven
This is only signing via the mechanism, which was never fully supported or part of any standard. To sign webstart applications (even FX apps) just use jarsigner or the associated ant signjar task. -DrD- [1] https://ant.apache.org/manual/Tasks/signjar.html > On Dec 13, 2016, at 11:02 AM,

Re: [9] Review request: JDK-8169443 Deprecate Java Packager Blob Signing

2016-12-13 Thread Stefan Fuchs
Hi Chris, well I think reason number 1 is not correct. The definition of self signed depends on who created the signing key. If you created it yourself, it is a self signed jar and will rightfully be blocked. If you however obtained the signing key from a Certification Authority, that java

Re: [9] Review request: JDK-8169443 Deprecate Java Packager Blob Signing

2016-12-13 Thread Chris Bensen
Hi Stefan, Yes, it is being deprecated. It will continue to function as it has. Two main reasons for the deprecation are: 1. Self signed jars are blocked and sign as blob is a self signed jars. 2. There will be a replacement for modules that will be better. Chris > On Dec 12, 2016, at 11:56

Re: [9] Review request: JDK-8169443 Deprecate Java Packager Blob Signing

2016-12-12 Thread Stefan Fuchs
Hi, so blog signing as deprecated. What are the reasons for deprecating blog signing? Are there alternatives? How do I sign a webstart application? Stefan David, Please review these changes to deprecate the blob signing from the Java Packager. JIRA: