[MJAR-33] Jarsigner shows password on command line

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.1
• Fix Version/s: 2.1
• Assignee: Mike Perham
• Reporter: Hes Siemelink
• Created: 03/Mar/06 03:53
• Updated: 22/Aug/06 07:51
• Resolved: 22/Jun/06 18:26

Description

When I sign a jar I see the password of the keystore in the debug output:

[debug] jarsigner executable=[C:\Program Files\Java\jdk1.5.0_05\jre\..\bin\jarsigner.exe]
[debug] Executing: "C:\Program Files\Java\jdk1.5.0_05\jre\..\bin\jarsigner.exe" -keystore my-keystore.pfx -storepas
s SECRET_PASSPHRASE!! -storetype PKCS12 E:\Temp\jbossall-client-jboss-4.0.3.jar mykey

It would be nice if this could be masked.

I get this using the webstart plugin.