Google

SignJar

Description

Signs jar or zip files with the javasign command line tool. The tool detailed dependency checking: files are only signed if they are not signed. The signjar attribute can point to the file to generate; if this file exists then its modification date is used as a cue as to whether to resign any JAR file.
Note: Requires Java 1.2 or later.

Parameters

Attribute Description Required
jar the jar file to sign Yes.
alias the alias to sign under Yes.
storepass password for keystore integrity. Yes.
keystore keystore location No
storetype keystore type No
keypass password for private key (if different) No
sigfile name of .SF/.DSA file No
signedjar name of signed JAR file No
verbose (true | false) verbose output when signing No; default false
internalsf (true | false) include the .SF file inside the signature block No; default false
sectionsonly (true | false) don't compute hash of entire manifest No; default false
lazy flag to control whether the presence of a signature file means a JAR is signed No; default false

Parameters as nested elements

Attribute Description Required
fileset fileset of JAR files to sign No

Examples

<signjar jar="${dist}/lib/ant.jar" alias="apache-group" storepass="secret"/>

signs the ant.jar with alias "apache-group" accessing the keystore and private key via "secret" password.


Copyright © 2000-2001 Apache Software Foundation. All rights Reserved.