[MSHARED-303] Jar Signer does not support protected authentication path

• Type: Task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: maven-jarsigner-1.0, maven-jarsigner-1.1
• Fix Version/s: maven-jarsigner-1.2
• Assignee: Tony Chemit
• Reporter: Tony Chemit
• Created: 12/Nov/13 09:50
• Updated: 12/Nov/13 10:02
• Resolved: 12/Nov/13 10:02

Description

The jarsigner tool has an option "-protected" (see http://docs.oracle.com/javase/6/docs/technotes/tools/windows/jarsigner.html#Options, documentation for option -storetype): a PCKS#11 token may have a protected authentication path (such as a dedicated PIN-pad or a biometric reader). In such case the -protected option must be specified and no password options can be specified.

The current version does not support this option. Please find patches for maven-jarsigner-1.0 and maven-jarsigner-plugin (Version 1.3-SNAPSHOT) attached.

Testcases are left out because a pin reader, a PCKS#11 smart card and human interaction would be necessary to test this scenario. However, the patched version works fine in my environment.

Issue Links

• is depended upon by: MJARSIGNER-26 Jar Signer does not support protected authentication path