Skip to content
Snippets Groups Projects
Unverified Commit 549b3d79 authored by Bob Callaway's avatar Bob Callaway Committed by GitHub
Browse files

Add new type for JAR archives (#272)


* Add new type for JAR archives

This adds support for a new pluggable type that can extract signatures
from signed JAR files. Per the JAR spec, a special manifest file is
created with the digest hashes of all included content in the JAR file.
It is this special manifest file that is then signed, and included in a
file within the archive in PKCS7 format. The PKCS7 file also includes
the X509 certificate that can be used to verify the signed manifest file
inside of the JAR.

Signed-off-by: default avatarBob Callaway <bob.callaway@gmail.com>
parent d1a3b914
No related branches found
No related tags found
No related merge requests found
Showing
with 2385 additions and 5 deletions
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment