For Programmers: Free Programming Magazines  


Home > Archive > Java Security > November 2005 > Cert Expiration Date in Jar Files









You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

 

Author Cert Expiration Date in Jar Files
Joe

2005-11-22, 8:00 am

Is there any way to reveal the expiration date of the digital
certificate used to sign a jar file - by only having the signed
jar file available?

Joe

P.S. Please also e-mail to joe_@_mcmahon.com after removing the
underscores from my e-mail address. Thanks.

Ben_

2005-11-22, 8:00 am

It's likely all certificate information is in the jar:
"
The Signature Block (.DSA) File
The .SF file is signed and the signature is placed in the .DSA file. The
..DSA file also contains, encoded inside it, the certificate or certificate
chain from the keystore which authenticates the public key corresponding to
the private key used for signing.
"
http://java.sun.com/j2se/1.5.0/docs.../jarsigner.html

jarsigner -verify -verbose -certs my.jar will display some details but not
all.

Maybe it requires a bit of programming to get the information you want ?


Sponsored Links







Also available: Server administration forum archive | Web Design forum archive | Software forum archive | Hardware reviews archive

Copyright 2008 codecomments.com