Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.java.programmer > #27376 > unrolled thread

timestamping Jars

Back to article view | Back to comp.lang.java.programmer

Contents

  timestamping Jars Roedy Green <see_website@mindprod.com.invalid> - 2014-01-21 09:49 -0800
    Re: timestamping Jars Wayne <nospam@all.invalid> - 2014-01-21 23:46 -0500

#27376 — timestamping Jars

The new java lets you timestamp jars and gives a warning message if
you don't. Timestamped jars continue to work even after the
certificate has expired.

You need a time stamping service that jarsigner can find out the
official time of stamping from using RFC 3161. 

Has anyone found some good cheap, reliable services?
-- 
Roedy Green Canadian Mind Products http://mindprod.com
Unlike many machines, computers require no water once they are
manufactured.

[toc] | [next] | [standalone]

#27384

On 1/21/2014 12:49 PM, Roedy Green wrote:
> The new java lets you timestamp jars and gives a warning message if
> you don't. Timestamped jars continue to work even after the
> certificate has expired.
> 
> You need a time stamping service that jarsigner can find out the
> official time of stamping from using RFC 3161. 
> 
> Has anyone found some good cheap, reliable services?
> 

The European Union maintains (as of 2014) a list of approved
and trusted TSAs, at
<https://ec.europa.eu/digital-agenda/en/eu-trusted-lists-certification-service-providers>.

A Google search for "public time stamp authority free" will turn up
some, such as www.aloaha.com/wi-software-en/aloaha-timestamping-server.php.
To use it, the command would be (one long line):

jarsigner -signedjar MySignedApplet.jar
   -tsa http://card.aloaha.com:8081/tsa.aspx MyApplet.jar mykey

(I haven't used any of these yet.)
-- 
Wayne

[toc] | [prev] | [standalone]

Back to top | Article view | comp.lang.java.programmer

csiph-web