src/share/classes/sun/security/util/ManifestEntryVerifier.java

Print this page
rev 3083 : 7004035: signed jar with only META-INF/* inside is not verifiable
Reviewed-by: nobody

*** 183,193 **** */ public CodeSigner[] verify(Hashtable<String, CodeSigner[]> verifiedSigners, Hashtable<String, CodeSigner[]> sigFileSigners) throws JarException { ! if (skip) return null; if (signers != null) return signers; for (int i=0; i < digests.size(); i++) { --- 183,196 ---- */ public CodeSigner[] verify(Hashtable<String, CodeSigner[]> verifiedSigners, Hashtable<String, CodeSigner[]> sigFileSigners) throws JarException { ! // MANIFEST.MF should not be skipped. It has signers. ! if (skip && !entry.getName().equals(JarFile.MANIFEST_NAME)) { ! return null; ! } if (signers != null) return signers; for (int i=0; i < digests.size(); i++) {