Details
-
Type:
Bug
-
Status:
Open
-
Priority:
Major
-
Resolution: Unresolved
-
Affects Version/s: 1.4.1
-
Fix Version/s: None
-
Component/s: None
-
Labels:None
-
Number of attachments :
Description
Using jdk & webstart 1.5:
When signing a dependend jar that is already signed (for example acegic-security-0.8.2.jar), the new jar has 2 .RSA and .SF files (but each class is only signed once).
But webstart can't handle this (it should but it doesn't) and it says that not all jars are signed by the same certificate.
Acegi's jar are good test cases (they are signed by Ben Alex in ibiblio).
When unsigning, don't forget to remove META-INF/xxx.SF and META-INF/xxx.RSA (case insensitive)
An option unsignAnyAlreadySigned would be handy, not to have to note every jar to unsign.