com.netphantom.server.utils

Class JarTools

java.lang.Object

com.netphantom.server.utils.JarTools

public class JarTools
extends Object

This class is a tools class for handling JAR files to e.g. check for a signed JAR, sign or re-sign a JAR.

THIS CLASS IS INTENDED FOR WINDOWS!

Author:

Christopher Mindus

Constructor Summary

Constructors

Constructor and Description
JarTools()

Method Summary

Modifier and Type	Method and Description
static boolean	configureJarSigning(VirtualSessionManager vsm, IniFile ini) Called to edit the dialog box for Jar Signing.
static X509Certificate[]	getJarCertificates(JarFile jf) Verifies an open JAR file (with verify flag present) for valid certificates.
static void	initalizeSigningData(IniFile ini) Initializes an INI file with default settings for signing for new projects.
static boolean	isJarSigned(String jarFileName) Checks if a JAR file is signed.
static void	putAttributes(Attributes attributes) Puts the version, trusted, sealed, permission and codebase attributes into the manifest.
static String	removeJarSignature(String jarFileName) Removes the existing signature in a JAR file.
static String	removeJarsSignature(VirtualPanel vp, String parent, String files) Removes all signatures from the specified JAR files, ignoring ZIP files.
static boolean	repack200Jar(String fn, IniFile ini) Deprecated. "for-removal" since Java 14 with no replacement.
static int	signJar(String fn, IniFile ini) Signs a single file with the INI file settings.
static String	signJars(VirtualPanel vp, String parent, String files, IniFile ini) Signs the specified JAR files, ignoring ZIP files.
static void	transferSigningData(IniFile from, IniFile to) Transfers the INI settings for signing from one INI file to another.
static String	verifyManifest(Manifest man) Verifies that the main manifest attributes are correct according to Java 7 update 25 or better using the update security model for sealed, codebase and permissions attributes.
static String	verifyManifest(String fn) Verifies that the main manifest attributes are correct according to Java 7 update 25 or better using the update security model for sealed, codebase and permissions attributes.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

JarTools

public JarTools()

Method Detail

verifyManifest

public static String verifyManifest(String fn)
                             throws IOException

Verifies that the main manifest attributes are correct according to Java 7 update 25 or better using the update security model for sealed, codebase and permissions attributes.

Parameters:

fn - The Jar file name.

Returns:

null for OK, otherwise the failed attribute description.

Throws:

IOException

verifyManifest

public static String verifyManifest(Manifest man)

Verifies that the main manifest attributes are correct according to Java 7 update 25 or better using the update security model for sealed, codebase and permissions attributes.

Parameters:

man - The manifest.

Returns:

null for OK, otherwise the failed attribute description.

putAttributes

public static void putAttributes(Attributes attributes)

Puts the version, trusted, sealed, permission and codebase attributes into the manifest.

getJarCertificates

public static X509Certificate[] getJarCertificates(JarFile jf)
                                            throws IOException

Verifies an open JAR file (with verify flag present) for valid certificates.

Returns:

null if not signed, otherwise the X.509 certificates. If the file has no files, return an empty list of X.509 certificates.

Throws:

IOException - if there is a problem with the JAR file or it's signing.

isJarSigned

public static boolean isJarSigned(String jarFileName)

Checks if a JAR file is signed.

removeJarSignature

public static String removeJarSignature(String jarFileName)

Removes the existing signature in a JAR file.

Returns:

an error message or null if OK.

configureJarSigning

public static boolean configureJarSigning(VirtualSessionManager vsm,
                                          IniFile ini)

Called to edit the dialog box for Jar Signing.

Returns:

true for changed settings, false for cancel.

transferSigningData

public static void transferSigningData(IniFile from,
                                       IniFile to)

Transfers the INI settings for signing from one INI file to another.

initalizeSigningData

public static void initalizeSigningData(IniFile ini)

Initializes an INI file with default settings for signing for new projects.

removeJarsSignature

public static String removeJarsSignature(VirtualPanel vp,
                                         String parent,
                                         String files)

Removes all signatures from the specified JAR files, ignoring ZIP files.

Returns:

null for OK, otherwise an error message.

signJar

public static int signJar(String fn,
                          IniFile ini)
                   throws IOException

Signs a single file with the INI file settings.

Returns:

int, method of signing, 0=not signed, 1=signed with system certificate, 2=signed with user certificate.

Throws:

IOException - for file failures.

signJars

public static String signJars(VirtualPanel vp,
                              String parent,
                              String files,
                              IniFile ini)

Signs the specified JAR files, ignoring ZIP files.

Returns:

null for OK, otherwise an error message.

repack200Jar

@Deprecated
public static boolean repack200Jar(String fn,
                                                IniFile ini)
                                         throws IOException

Deprecated. "for-removal" since Java 14 with no replacement.

Repacks a JAR file using Pack200. This should be done before possible signing.

Since Java 14, this has been removed due to:
Pack200 modifies the contents of the Java class files in the JAR archive undergoing compression. Transformations to the class files include merging constant pools and removing duplicated attributes. The format is not lossless; it is possible for a JAR file after unpacking to not be identical to how it was before packing.

The "client.jars.pack200" setting in [Base] section in the project is therefore ignored.

Returns:

true if packed, false not packed.

Throws:

IOException - for file failures.