Maven NetBeans Module Plugin

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Won't Fix
• Affects Version/s: 3.0
• Fix Version/s: None
• Component/s: None
• Labels:

  None
• Environment:

  All

For releasing webstart applications is crucial to have all jars included signed with one certificate of the releasing company. If these jars are not signed with one unified certificate, Java Webstart system asks for each unsigned (or jar with another signature) if user agrees and grants access to the system.

For this case, we need to sign all jars, included in package, with one certificate. As we looked into source code of this plugin, one part of signing is in org.netbeans.nbbuild.MakeJNLP#signOrCopy(from, to), another in CreateWebstartAppMojo (for jnlp-launcher.jar and branding jars). As all these uses the ant SignJar task, we submit issue with patch, allowing us to force signing of jars (see https://issues.apache.org/bugzilla/show_bug.cgi?id=46891). But we are not sure, if this will be accepted, because solving of issues in ant is really slow.

Another solution is usage of Maven Jar Plugin. But this plugin denied to sign already signed jar. In this case, we must submit patch, allowing us to force signing of already signed jars. But there is problem with the MakeJNLP task. Using this solution, we must disable signing of jars in MakeJNLP and sign jars programmatically using JarSignMojo from Maven Jar Plugin.

We can see, that the first solution with modification of SignJar task is more complex as it solves problems with signing in both MakeJNLP task and CreateWebstartAppMojo, but we can expected long delay before the patch will be accepted (or worst - rejected). Another solution is not so conceptual, but maybe more clear.

As last instance, we can also contribute modified JarSignMojo class from Maven Jar Plugin , that was used in our corporate modified Maven NBM plugin 2.7 for creating webstart application. This must be also used programatically as the previous solution directly using Maven Jar Plugin.

• Assignee:

  Jesse Glick

  Reporter:

  Pavel Jisl

• Created:

  24/Mar/09 3:59 AM

  Updated:

  19/Oct/10 6:28 PM

  Resolved:

  19/Oct/10 6:28 PM