Re: understanding signing.

From	Roedy Green <see_website@mindprod.com.invalid>
Newsgroups	comp.lang.java.security
Subject	Re: understanding signing.
Date	2014-04-09 18:37 -0700
Organization	Canadian Mind Products
Message-ID	<9dtbk91t66rmjk9v2codidgi4egbals2ch@4ax.com> (permalink)
References	<al9ak9p5tg8gvln332cfgf5let3h0so9qd@4ax.com>

Show all headers | View raw

On Wed, 09 Apr 2014 03:55:53 -0700, Roedy Green
<see_website@mindprod.com.invalid> wrote, quoted or indirectly quoted
someone who said :

>It there a tool you can feed a jar to and it will tell you if the jar
>is signed, who signed it, is it timestamped, and when it was
>timestamped.



jarsigner.exe -verify -verbose -certs somejar.jar

tells you quite a bit

I think timestamping might work only with real certs. That will
explain why I can't find any trace of it. It just quietly ignores the
request.
-- 
Roedy Green Canadian Mind Products http://mindprod.com
"Don't worry about people stealing an idea; if it's original, you'll
 have to shove it down their throats." 
~ Howard Aiken (born: 1900-03-08 died: 1973-03-14 at age: 73)

Back to comp.lang.java.security | Previous | Next — Previous in thread | Find similar

Thread

understanding signing. Roedy Green <see_website@mindprod.com.invalid> - 2014-04-09 03:55 -0700
  Re: understanding signing. Roedy Green <see_website@mindprod.com.invalid> - 2014-04-09 17:38 -0700
  Re: understanding signing. Roedy Green <see_website@mindprod.com.invalid> - 2014-04-09 17:58 -0700
  Re: understanding signing. Roedy Green <see_website@mindprod.com.invalid> - 2014-04-09 18:37 -0700

csiph-web