Re: Verifying signed jar files from C
Paul J. Lucas wrote:
I have a double-clickable application (for both Windows and Mac OS X) written
in Java (stored in jar files)
....
I want to sign the jar files at build-time and later verify them at run-time
to ensure they haven't been altered.
....
Can I do what I want and, if so, how?
Use web-start. It will give the user desktop icons for
win & mac (and unix/linux, if required), and will handle
the verification for you.
While there may be ways to launch a web-started
application from 'the class files' - I have never seen
it done, and it would be at the mercy of changes in
web-start itself (the tech. people specifically warn
against relying on a given cache location, and any
attempt to launch it would probably need to look
to the classes in the cache).
Just how technically proficient do you expect your
end users to be? (I reckon by the time they could
hack a solution together under web-start, they might
just as easily have hunted down the parts of the C
code that invoke the signature check).
Andrew T.