Groups | Search | Server Info | Keyboard shortcuts | Login | Register

Groups > comp.lang.java.security > #287

Re: understanding signing.

Show all headers | View raw

On Wed, 09 Apr 2014 03:55:53 -0700, Roedy Green
<see_website@mindprod.com.invalid> wrote, quoted or indirectly quoted
someone who said :

>It there a tool you can feed a jar to and it will tell you if the jar
>is signed, who signed it, is it timestamped, and when it was
>timestamped.

I have looked at a jar that was timestamped and not timestamped. The
only difference seems to be the values of the .SF digests. no sign of
the timestamper or the fact it was timestamped.
Perhaps that just signed the digests twice.
-- 
Roedy Green Canadian Mind Products http://mindprod.com
"Don't worry about people stealing an idea; if it's original, you'll
 have to shove it down their throats." 
~ Howard Aiken (born: 1900-03-08 died: 1973-03-14 at age: 73)

Back to comp.lang.java.security | Previous | Next — Previous in thread | Next in thread | Find similar

Thread

understanding signing. Roedy Green <see_website@mindprod.com.invalid> - 2014-04-09 03:55 -0700
  Re: understanding signing. Roedy Green <see_website@mindprod.com.invalid> - 2014-04-09 17:38 -0700
  Re: understanding signing. Roedy Green <see_website@mindprod.com.invalid> - 2014-04-09 17:58 -0700
  Re: understanding signing. Roedy Green <see_website@mindprod.com.invalid> - 2014-04-09 18:37 -0700

csiph-web