用于检查签名 JAR 的 Java 实用程序
所有,
是否有一个好的免费 Java 实用程序可以显示 JAR 文件签名的密钥?
我的应用程序中引用了许多 JAR 文件 - 我想知道哪些文件是由同一证书签名的。
基本上我想知道这一点,因为当我运行 JNLP 文件时(万岁!),我收到消息“JNLP 文件中的 JAR 资源未由同一证书签名”。
我有很多 JAR,因此实用程序会派上用场。
编辑
主要问题是是否有一个工具可以显示哪些 JAR 由哪个证书签名。不幸的是,jarsigner 工具只告诉我它们是否已签名 - 而不是由谁/什么签名。
不幸的是我还没有找到任何工具。
结束编辑
干杯,
安德兹
All,
Is there a good free Java utility that shows you the key that a JAR file was signed by?
I have a number of JAR files referenced in my application - I want to know which ones were signed by the same certificate.
Basically I want to know this as when I am running my JNLP file (hurray!) I am greeted with the message "JAR resources in the JNLP file are not signed by the same certificate".
I have looked at jar resources in jnlp are not signed by the same certificate
I have quite a few JARS so a utility would come in handy.
Edit
The main question is was there a tool that can show me which JARs were signed by which certificate. Unfortunately the jarsigner tool only tells me if they are signed or not - not by who/what.
Unfortunately I have still not found any tool as yet.
end Edit
Cheers,
Andez
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(4)
最简单的方法就是用你自己的密钥将它们全部退出。
The easiest is just to resign them all with your own key.
您查看过 jarsigner 吗?
Did you take a look at jarsigner ?
这可能会有所帮助 签名 Jar文件。
This might be of help Signed Jar File.
JDK 工具 JarSigner 可能就是您正在寻找的工具。您可以在tools.jar 中找到它。如果您需要更深入地了解签名和验证过程,可以使用资源。
另外我认为应该可以使用具有不同证书的罐子。我没有测试它,但也许它有助于做类似
或
The JDK tool JarSigner is probably that what you are searching for. You find it in the tools.jar. The sources are availible if you need a deeper understanding of the signing and verification process.
Also I think it should be possible to use jars with different certs. I didn't test it but perhaps it helps to do something like
or