Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8005124

jarsigner -certs doesn't show anything unless -verbose is specified

    Details

    • Type: Enhancement
    • Status: Open
    • Priority: P4
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: security-libs
    • Labels:
      None

      Description

      I know the man page for jarsigner says that the -verbose and -verify options have to be specified, but I think -certs (with -verify) should still emit something, perhaps not the whole chain, but just the end-entity cert. Basically, right now the -certs option is useless unless -verbose is specified, which doesn't seem right.

      Also, I think the -verbose option should also print the TSA chain, if the jar is timestamped.

        Activity

        Hide
        weijun Weijun Wang added a comment -
        The TSA chain can be added.

        I understand -verbose is for jar entries and -certs is for certs. If we want -certs to do something, I'd still like the whole chain (including TSA chain) printed. But it won't be very different from output of -verbose:summary -certs.
        Show
        weijun Weijun Wang added a comment - The TSA chain can be added. I understand -verbose is for jar entries and -certs is for certs. If we want -certs to do something, I'd still like the whole chain (including TSA chain) printed. But it won't be very different from output of -verbose:summary -certs.
        Hide
        darcy Joe Darcy added a comment -
        Removing erroneous tbd_minor value in affects version.
        Show
        darcy Joe Darcy added a comment - Removing erroneous tbd_minor value in affects version.

          People

          • Assignee:
            weijun Weijun Wang
            Reporter:
            mullan Sean Mullan
          • Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

            • Created:
              Updated: