Type: New Feature
Affects Version/s: 1.2
Fix Version/s: None
Number of attachments :
Since JDK 5, Sun/Oracle added to the JDK jarsigner tool, the possibility to use a Timestamp authority while signing.
The option is docuemnted there :
and for those interested in this feature (timestamping), some good explanation about this technology can be found there :
I have attached a patch that includes the addition of this argument to the command line; and a new integration test.
Applying this patch, you should be able to ask a timestamp authority to certify the date of signing, using this configuration for example :
you can find this code in the patch integration test (timestampauthority , src/it/timestampauthority)
Working on this patch, I THOUGHT there was a workaround, playing around with the <arguments> option :
but it wraps this argument with quotes ("-tsa https://timestamp.geotrust.com/tsa" ) ; something the JDK jarsigner tool does not accept; so... no workaround possible