Uploaded image for project: 'WildFly'
  1. WildFly
  2. WFLY-1633

getCodeSigners() returns null in signed WAR deployments

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Major Major
    • None
    • 8.0.0.Alpha2
    • Class Loading
    • None
    • Hide
      • Sign files inside an EAR archive with jarsigner (.war and .jar)
      • Write a servlet calling this.getProtectionDomain().getCodeSource().getCodeSigners() - null is returned
      • Write an EJB method and do the same, the good codesigner info is returned
      Show
      Sign files inside an EAR archive with jarsigner (.war and .jar) Write a servlet calling this.getProtectionDomain().getCodeSource().getCodeSigners() - null is returned Write an EJB method and do the same, the good codesigner info is returned
    • Hide

      A solution is to modify EarStructureProcessor to disable explode for WAR deployments (call of "createResourceRoot")

      Show
      A solution is to modify EarStructureProcessor to disable explode for WAR deployments (call of "createResourceRoot")

      Calling getProtectionDomain().getCodeSource().getCodeSigners() for a class of a WAR deployment returns null, even if the WAR file is signed. No problem for EJB JAR.
      This is because the WAR file is exploded on disk (the full analysis is described in the forum post).

            Unassigned Unassigned
            cfillot_jira Christophe Fillot (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated: