[MJARSIGNER-62] additionalArguments should not have double quotes

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 3.0.0
• Environment: Windows
• Assignee: Unassigned
• Reporter: Manfred Koch
• Created: 16/Oct/20 12:55
• Updated: 11/Dec/23 13:19

Description

Adding additional arguments to the jarsigner with the arguments option will be double qouted in the command line. That causes errors and should be avoided.

 

Example:

 

<arguments>-certchain c:\chain.crt</arguments>

 

Results in

c:\Jenkins\tools\hudson.model.JDK\jdk-1.8.0_144-windows-x64\jre\..\bin\jarsigner.exe -keystore NONE -storepass *** -storetype PKCS11 -providerClass sun.security.pkcs11.SunPKCS11 -providerArg C:\config.conf "-certchain c:\chain.crt" -tsa http://timestamp.digicert.com library.jar alias

That can't be executed. I check that manually on the system.

But without double qoutes

c:\Jenkins\tools\hudson.model.JDK\jdk-1.8.0_144-windows-x64\jre\..\bin\jarsigner.exe -keystore NONE -storepass *** -storetype PKCS11 -providerClass sun.security.pkcs11.SunPKCS11 -providerArg C:\config.conf -certchain c:\chain.crt -tsa http://timestamp.digicert.com library.jar alias

it is possible to execute the command. I have checked the source code of the AbstractJarsignerMojo. All additionalArguments should not be double quoted.

 

Issue Links

• is related to: MJARSIGNER-63 certchain should be supported by default
• links to: GitHub Pull Request #17