apache / apache/maven-jarsigner-plugin

[MJARSIGNER-54] Some jars in the <archiveDirectory> are signed twice or not signed at all

Open
#82 1 comment 0 reactions 0 assignees View on GitHub
bug priority:major
Dominant language
Java
Stars
23
Forks
18
Avg merge
4h 23m
Merged PRs (30d)
2

Description

**[Pablo León](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=palevi)** opened **[MJARSIGNER-54](https://issues.apache.org/jira/browse/MJARSIGNER-54?redirect=false)** and commented

Some jars in the \ are signed twice, while others are not signed at all. Here is the pom snipped with the plugin configuration:

```xml

org.apache.maven.plugins
maven-jarsigner-plugin
1.4


sign
prepare-package

sign


mirthconnect
SERVER
src/main/resources/keystore.jks
xxxxx
xxxxx
JCEKS
http://sha256timestamp.ws.symantec.com/sha256/timestamp

-sigalgSHA256withRSA

true
target/jars


```

---

**Affects:** 1.4

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by examining the Maven Jarsigner Plugin's sign goal and how it handles jars in the configured . Reproduce the behavior using the provided plugin configuration and check which jars are signed twice or missed. Done means the jars in the archive directory are signed consistently.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
build-system
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.