Sign jar files

[Raed Qudaisat]

Hello all.
i have been tired searching for this, and i didn't find the answer.

what exactly should i do to sign a jar file? and where to place the signed jar?

i have created a keystore using the keytool and used it in the jarsigner but still i can't read files from the client's system!!!

any one has an answer?

Thanks.
Raed

[prateek urmaliya]

Hi Raed,

Are you building through ant if so you can use signjar task .
I am using it while generating jnlp.
jnlp.work.dir can be replaced with wherever you pick your jars from.

    
<signjar keystore="${keystore.dir}" alias="jabberwocky" storepass="jabberwocky123" lazy="yes">
 
<fileset dir="${jnlp.work.dir}" includes="**/*.jar" />
 
</signjar>

[ January 31, 2007: Message edited by: prateek urmaliya ]

[Raed Qudaisat]

hello
thank you very much for your reply.
i am not using the ant tool, i am building the jars with the jar tool. i will give you more details.

-first i am using linux.
-i have built the jar files using

jar -cvfm name.jar manifest.mf pckg

-then i have used the keytool to create the key like this.

keytool -genkey -alias raed -keypass raedpass -keystore tmpkey

it prompted me for the alias password and i made it raedpass.
-then i used the jarsigner tool like this.

jarsigner -keystore tmpkey -storepass raedpass -keypass raedpass name.jar raed

that is it, now what i want is to be able to read file from the client system, is that possible?

should i copy the jars to the client machine? or just put them on the server?

Thanks.
Raed