sign a Jar file

Question

I have manually added some class files in jar. and replaced in server. But server didn't come up with this new jar saying : java.lang.SecurityException: class "test.TestProcess2"'s signer information does not match signer information of other classes in the same package.

Do i need to sign the jar after updation and how to do the same.

Thanks in advance

Of course you need to sign it again. What happens when you google for "sign jar"? I get this as a result: http://docs.oracle.com/javase/tutorial/deployment/jar/signing.html. — JB Nizet, Jan 30 '13 at 15:18

score 1 · Answer 1 · answered Jan 30 '13 at 15:17

Do i need to sign the jar after updating?

Sure, it is the point of signing jars that the content is not modified by some else except you. If you modify it manually, then you have to resign.

In my case I use Eclipse and Ant to build the project. So the jar gets resigned every time I rebuild the project.

<signjar jar="myapplet.jar" keystore="myKeyStore" alias="me" storepass="pass"/>

score 1 · Answer 2 · answered Jan 30 '13 at 15:19

1

The problem is that the other classes in your JAR are signed differently than the classes that you added. Either don't sign the entire JAR or resign the JAR after you add the new classes. You can find information on the jarsigner tool here

answered Jan 30 '13 at 15:19

Tom

3,006
6
33
54

score 1 · Accepted Answer · answered Jan 30 '13 at 15:40

Yes.

You can also sign the jar manually for the command line. For example, in windows it looks moreless liek that:

"{YOUR_JDK_INSTALL_PATH}\bin\jarsigner.exe" -verbose -keystore {YOUR_KEYSTORE_PATH} -storepass {YOUR_STORE_PASS} -keypass {YOUR_KEY_PASS} {JAR_FILE}

sign a Jar file

3 Answers3