关于加密jar包的java.lang.SecurityException问题
Open
- Dominant language
- Kotlin
- Stars
- 5.1k
- Forks
- 591
- PR merge metrics
- No merged PRs in 30d
Description
private val JAR_SIGNATURE_EXTENSIONS = setOf("SF", "RSA", "DSA", "EC")
private fun isJarSignatureRelatedFiles(name: String): Boolean {
return name.startsWith("META-INF/") && name.substringAfterLast('.') in JAR_SIGNATURE_EXTENSIONS
}
目前的判断逻辑是META-INF路径下对应的签名文件不处理,避免出问题,但是我发现一个问题我这有一个库org.eclipse:paho:org.eclipse.paho.client.mqttv3:1.2.0,他的META-INF/MANIFEST.MF里也放置了sha256相关信息,所以依然存在报错 java.util.concurrent.ExecutionException: java.util.concurrent.ExecutionException: java.lang.SecurityException: SHA-256 digest error for org/eclipse/paho/client/mqttv3/internal/ClientState.class
Contributor guide
Assessment
This issue has not been assessed yet.