Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.java.programmer > #27384

Re: timestamping Jars

Show all headers | View raw

On 1/21/2014 12:49 PM, Roedy Green wrote:
> The new java lets you timestamp jars and gives a warning message if
> you don't. Timestamped jars continue to work even after the
> certificate has expired.
> 
> You need a time stamping service that jarsigner can find out the
> official time of stamping from using RFC 3161. 
> 
> Has anyone found some good cheap, reliable services?
> 

The European Union maintains (as of 2014) a list of approved
and trusted TSAs, at
<https://ec.europa.eu/digital-agenda/en/eu-trusted-lists-certification-service-providers>.

A Google search for "public time stamp authority free" will turn up
some, such as www.aloaha.com/wi-software-en/aloaha-timestamping-server.php.
To use it, the command would be (one long line):

jarsigner -signedjar MySignedApplet.jar
   -tsa http://card.aloaha.com:8081/tsa.aspx MyApplet.jar mykey

(I haven't used any of these yet.)
-- 
Wayne

Back to comp.lang.java.programmer | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

timestamping Jars Roedy Green <see_website@mindprod.com.invalid> - 2014-01-21 09:49 -0800
  Re: timestamping Jars Wayne <nospam@all.invalid> - 2014-01-21 23:46 -0500

csiph-web