用于检查签名 JAR 的 Java 实用程序

发布于 2024-11-16 22:51:37 字数 516 浏览 10 评论 0原文

所有,

是否有一个好的免费 Java 实用程序可以显示 JAR 文件签名的密钥?

我的应用程序中引用了许多 JAR 文件 - 我想知道哪些文件是由同一证书签名的。

基本上我想知道这一点,因为当我运行 JNLP 文件时(万岁!),我收到消息“JNLP 文件中的 JAR 资源未由同一证书签名”。

我看过 jnlp 中的 jar 资源不是由相同的证书签名

我有很多 JAR,因此实用程序会派上用场。

编辑

主要问题是是否有一个工具可以显示哪些 JAR 由哪个证书签名。不幸的是,jarsigner 工具只告诉我它们是否已签名 - 而不是由谁/什么签名。

不幸的是我还没有找到任何工具。

结束编辑

干杯,

安德兹

All,

Is there a good free Java utility that shows you the key that a JAR file was signed by?

I have a number of JAR files referenced in my application - I want to know which ones were signed by the same certificate.

Basically I want to know this as when I am running my JNLP file (hurray!) I am greeted with the message "JAR resources in the JNLP file are not signed by the same certificate".

I have looked at jar resources in jnlp are not signed by the same certificate

I have quite a few JARS so a utility would come in handy.

Edit

The main question is was there a tool that can show me which JARs were signed by which certificate. Unfortunately the jarsigner tool only tells me if they are signed or not - not by who/what.

Unfortunately I have still not found any tool as yet.

end Edit

Cheers,

Andez

如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

扫码二维码加入Web技术交流群

发布评论

需要 登录 才能够评论, 你可以免费 注册 一个本站的账号。

评论(4

宣告ˉ结束 2024-11-23 22:51:37

最简单的方法就是用你自己的密钥将它们全部退出。

The easiest is just to resign them all with your own key.

孤云独去闲 2024-11-23 22:51:37

您查看过 jarsigner 吗?

Did you take a look at jarsigner ?

暖阳 2024-11-23 22:51:37

这可能会有所帮助 签名 Jar文件

This might be of help Signed Jar File.

骄傲 2024-11-23 22:51:37

JDK 工具 JarSigner 可能就是您正在寻找的工具。您可以在tools.jar 中找到它。如果您需要更深入地了解签名和验证过程,可以使用资源

另外我认为应该可以使用具有不同证书的罐子。我没有测试它,但也许它有助于做类似

...
<resources>
    <jar href="jarwithcert1.jar"/>
</resources>
<resources>
    <jar href="jarwithcert2.jar"/>
</resources>
...

...
<resources>
    <jar href="jarwithcert1.jar" part="one" />
    <jar href="jarwithcert2.jar" part="two" />
</resources>
...

The JDK tool JarSigner is probably that what you are searching for. You find it in the tools.jar. The sources are availible if you need a deeper understanding of the signing and verification process.

Also I think it should be possible to use jars with different certs. I didn't test it but perhaps it helps to do something like

...
<resources>
    <jar href="jarwithcert1.jar"/>
</resources>
<resources>
    <jar href="jarwithcert2.jar"/>
</resources>
...

or

...
<resources>
    <jar href="jarwithcert1.jar" part="one" />
    <jar href="jarwithcert2.jar" part="two" />
</resources>
...
~没有更多了~
我们使用 Cookies 和其他技术来定制您的体验包括您的登录状态等。通过阅读我们的 隐私政策 了解更多相关信息。 单击 接受 或继续使用网站,即表示您同意使用 Cookies 和您的相关数据。
原文