didi / didi/booster

关于加密jar包的java.lang.SecurityException问题

Open
#487 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Kotlin
Stars
5.1k
Forks
591
PR merge metrics
No merged PRs in 30d

Description

private val JAR_SIGNATURE_EXTENSIONS = setOf("SF", "RSA", "DSA", "EC")

private fun isJarSignatureRelatedFiles(name: String): Boolean {
return name.startsWith("META-INF/") && name.substringAfterLast('.') in JAR_SIGNATURE_EXTENSIONS
}

目前的判断逻辑是META-INF路径下对应的签名文件不处理,避免出问题,但是我发现一个问题我这有一个库org.eclipse:paho:org.eclipse.paho.client.mqttv3:1.2.0,他的META-INF/MANIFEST.MF里也放置了sha256相关信息,所以依然存在报错 java.util.concurrent.ExecutionException: java.util.concurrent.ExecutionException: java.lang.SecurityException: SHA-256 digest error for org/eclipse/paho/client/mqttv3/internal/ClientState.class

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.