source: extensions/net.sf.basedb.mev/trunk/jarsign/readme.txt

Last change on this file was 1701, checked in by Nicklas Nordborg, 10 years ago

Fixes #405: Update certificate used for signing the web start files

  • Property svn:eol-style set to native
  • Property svn:keywords set to Date Id
File size: 2.0 KB
Line 
1For MeV to work as a Java Webstart application, the JAR
2files in the ./resources/jar must be signed. The currently
3checked in JAR files have already been signed, so there is
4no need to do this again unless MeV itself needs to be
5updated or if the current certificate has expired.
6Since this is a somewhat complex task, we have tried to make
7easier.
8
9Follow this procedure (for updating MeV):
10
111. Delete all the existing JAR files in the ./resources/jar
12   directory.
132. Copy all JAR files from the MeV distribution into the
14  ./resources/jar directory
153. Run 'ant fixjars' (*)
164. Run 'ant signjars'
175. Commit the changes to the subversion repository.
18
19Follow this procedure (for re-signing with a new certificat):
20
211. Generate a new certificate as desribed below.
222. Set lazy="false" for the <signjar> action in build.xml
233. Run 'ant signjars'
244. Revert back to  lazy="true"
255. Commit the changes to the subversion repository.
26
27--------------------------------------------------------
28* There is currently a problem with the 'magetab-parser.jar'
29and 'goose.jar' files.
30
31The 'magetab-parser.jar' file contains identical copies of
32several files and the signing tool doesn't allow this. The
33'fixjars' target will re-package the JAR file and remove
34the extra copies.
35
36The 'goose.jar' file has already been signed by another
37authority. To reduce the number of warnings a user has to
38get through we remove the existing signature and replace
39it with our own.
40--------------------------------------------------------
41
42
43Note!
44
45The mev-base.key is the self-signed certificate that we have
46used to sign the JAR files. It has the following properties:
47
48Alias: mev-base
49Password: mev-base
50Name: BASE Development team
51Organizational unit: BASE Development team
52Organization: Lund University
53City: Lund
54State: Sweden
55Country code: SE
56
57To re-generate the keystore execute the following command:
58
59keytool -genkey -validity 1000 -alias mev-base -keypass mev-base -keystore mev-base.key
60---------------------------------------------------------------
61
Note: See TracBrowser for help on using the repository browser.