Problem re-signing a jar file

[Ganssauge, Gottfried]

Im building an applet using maven2 and in order to have an easier time
deploying it, I want to integrate all of it's dependencies along with
the applet code into a single jar using the dependency plugin.
One of those dependencies is a signed applet and of course the
certificate and the signatures are also unpacked by the dependency
plugin.

Now I'm trying to sign my applet using jar:sign and here a problem
appears: the jar plugin reports an error saying "jarsigner:
java.lang.SecurityException: Invalid signature file digest for Manifest
main attributes".

Configuring verify to false doesn't help - the jarsigner is always run
with the -verify flag.

Signing the same file by hand poses no problems as long as I avoid using
the -verify flag.

Any clues what I could do to avoid this failure?

Cheers,

Gottfried

P.S.:
Find attached my POM and an error log produced by "mvn -X"

<project xmlns="http://maven.apache.org/POM/4.0.0"; xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
  xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd";>
  <modelVersion>4.0.0</modelVersion>
  <groupId>de.haufe.iDesk</groupId>
  <artifactId>ShellExecuteApplet</artifactId>
  <packaging>jar</packaging>
  <version>1.0</version>
  <name>ShellExecuteApplet</name>
  <url>http://www.haufe.de</url>

  <dependencies>
    <dependency>
      <groupId>de.haufe.iDesk.jar</groupId>
      <artifactId>jShellExecute</artifactId>
      <type>jar</type>
      <version>1.0</version>
      <scope>compile</scope>
    </dependency>
  </dependencies>

  <build>
    <plugins>
      <plugin>
        <artifactId>maven-compiler-plugin</artifactId>
        <configuration>
          <source>1.4</source>
          <target>1.4</target>
        </configuration>
      </plugin>
      <plugin>
        <groupId>org.apache.maven.plugins</groupId>
        <artifactId>maven-jar-plugin</artifactId>
        <executions>
           <execution>
              <goals>
                 <goal>sign</goal>
              </goals>
           </execution>
        </executions>
        <configuration>
          <alias>${signature.alias}</alias>
          <type>${haufe.keystore.type}</type>
          <storepass>${haufe.storepass}</storepass>
          <keystore>${haufe.keystore}</keystore>
          <verbose>true</verbose>
          <verify>false</verify>
        </configuration>
      </plugin>
      <plugin>
        <groupId>org.apache.maven.plugins</groupId>
        <artifactId>maven-dependency-plugin</artifactId>
        <executions>
          <execution>
            <id>copy</id>
            <phase>compile</phase>
            <goals>
              <goal>copy</goal>
            </goals>
            <configuration>
              <artifactItems>
                <artifactItem>
                  <groupId>de.haufe.iDesk.dll</groupId>
                  <artifactId>jShellExecute</artifactId>
                  <version>1.0</version>
                  <type>dll</type>
                  <outputDirectory>target/classes</outputDirectory>
                  <overWrite>true</overWrite>
                  <destFileName>jShellExecute.dll</destFileName>
                </artifactItem>
              </artifactItems>
            </configuration>
          </execution>
          <execution>
            <id>unpack</id>
            <phase>compile</phase>
            <goals>
              <goal>unpack</goal>
            </goals>
            <configuration>
              <artifactItems>
                <artifactItem>
                  <groupId>de.haufe.iDesk.jar</groupId>
                  <artifactId>jShellExecute</artifactId>
                  <version>1.0</version>
                  <type>jar</type>
                  <outputDirectory>target/classes</outputDirectory>
                </artifactItem>
              </artifactItems>
            </configuration>
          </execution>
        </executions>
      </plugin>
    </plugins>
  </build>

  <distributionManagement>
    <repository>
      <id>local</id>
      <name>Helios</name>
      <url>scpexe://helios.haufe-ep.de/home/maven/maven-proxy/target/repo</url>
    </repository>
  </distributionManagement>
</project>

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]