<html style="direction: ltr;">
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
<style type="text/css">body p { margin-bottom: 0.2cm; margin-top: 0pt; } </style>
</head>
<body style="direction: ltr;"
bidimailui-detected-decoding-type="UTF-8" bgcolor="#FFFFFF"
text="#000000">
On 10/22/2011 11:15 PM, Jonathan Ben Avraham wrote:
<blockquote
cite="mid:alpine.DEB.2.02.1110222309530.2056@yehudia.tkos.co.il"
type="cite">Dear Linux-IL colleagues,
<br>
Anyone know how to create a signature for a jarfile manifest using
OpenSSL (or anything other than Java security tools) that
Jarsigner will verify?
<br>
Shavua tov,
<br>
<br>
- yba
<br>
<br>
<br>
</blockquote>
Not only do I NOT know how to do that, I don't even know how to
verify the signature myself. The hashes claim to be MD5 (or whatever
other standard hashing algorithm), but an MD5 of the signed files do
not yield the same hash. I have no idea what is, in fact, signed
there.<br>
<br>
If you can calculate the has, I may be able to help you with the
actual signature, however.<br>
<br>
Shachar<br>
<br>
<pre class="moz-signature" cols="72">--
Shachar Shemesh
Lingnu Open Source Consulting Ltd.
<a class="moz-txt-link-freetext" href="http://www.lingnu.com">http://www.lingnu.com</a>
</pre>
</body>
</html>