[MACR-53] Reproducible Builds: make entries in output jar files reproducible (order + timestamp)

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.1.0
• Fix Version/s: 3.2.0
• Assignee: Herve Boutemy
• Reporter: Herve Boutemy
• Created: 10/May/20 09:23
• Updated: 10/May/20 17:53
• Resolved: 10/May/20 17:51

Description

since a jar file is a zip file, entries order and timestamp are a natural source of non Reproducible Builds: https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=74682318

Issue Links

• Is contained by: MNG-6276 Support Reproducible Builds (https://reproducible-builds.org)