Signs jar or zip files with the javasign command line tool. The
tool detailed dependency checking: files are only signed if they
are not signed. The signjar attribute can point to the file to
generate; if this file exists then
its modification date is used as a cue as to whether to resign any JAR file.
Note: Requires Java 1.2 or later.
Attribute | Description | Required |
jar | the jar file to sign | Yes. |
alias | the alias to sign under | Yes. |
storepass | password for keystore integrity. | Yes. |
keystore | keystore location | No |
storetype | keystore type | No |
keypass | password for private key (if different) | No |
sigfile | name of .SF/.DSA file | No |
signedjar | name of signed JAR file | No |
verbose | (true | false) verbose output when signing | No; default false |
internalsf | (true | false) include the .SF file inside the signature block | No; default false |
sectionsonly | (true | false) don't compute hash of entire manifest | No; default false |
lazy | flag to control whether the presence of a signature file means a JAR is signed | No; default false |
Attribute | Description | Required |
fileset | fileset of JAR files to sign | No |
<signjar jar="${dist}/lib/ant.jar" alias="apache-group" storepass="secret"/>
signs the ant.jar with alias "apache-group" accessing the keystore and private key via "secret" password.
Copyright © 2001 Apache Software Foundation. All rights Reserved.