apache / apache/maven-jarsigner-plugin
[MJARSIGNER-54] Some jars in the <archiveDirectory> are signed twice or not signed at all
- Dominant language
- Java
- Stars
- 23
- Forks
- 18
- Avg merge
- 4h 23m
- Merged PRs (30d)
- 2
Description
**[Pablo León](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=palevi)** opened **[MJARSIGNER-54](https://issues.apache.org/jira/browse/MJARSIGNER-54?redirect=false)** and commented
Some jars in the \ are signed twice, while others are not signed at all. Here is the pom snipped with the plugin configuration:
```xml
org.apache.maven.plugins
maven-jarsigner-plugin
1.4
sign
prepare-package
sign
mirthconnect
SERVER
src/main/resources/keystore.jks
xxxxx
xxxxx
JCEKS
http://sha256timestamp.ws.symantec.com/sha256/timestamp
-sigalgSHA256withRSA
true
target/jars
```
---
**Affects:** 1.4
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by examining the Maven Jarsigner Plugin's sign goal and how it handles jars in the configured . Reproduce the behavior using the provided plugin configuration and check which jars are signed twice or missed. Done means the jars in the archive directory are signed consistently.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- build-system
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100