[NETBEANS-4508] Limitation to sign Ant based nbm with timestamp

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 11.3
• Component/s: projects - Ant
• Assignee: Unassigned
• Reporter: Tiago Martins
• Created: 26/Jun/20 19:32
• Updated: 26/Jun/20 19:33

Description

Warning when sign a nbm using nbm Ant script.

output message

Warning
No -tsa or -tsacert is provided and this jar is not timestamped. Without a timestamp, users may not be able to validate this jar after the signer certificate's expiration date (2021-03-16).

 

Classic.xml target nbm doesn't support timestamp url server (-tsa command of jarsigner.exe) 

 

<target name="nbm" depends="init,netbeans,-nbm-prompt-for-storepass,-init-executables,-init-extra.nbm.files" description="Build NBM archive.">
<mkdir dir="${build.dir}"/>
<property name="nbm.target.cluster" value=""/> <!-- fallback -->
<property name="license.file.override" value="${license.file}"/>
<property name="use.pack200" value="true"/>
<property name="pack200.excludes" value=""/>
<property name="nbm.locales" value="${locales}"/>
<makenbm file="${build.dir}/${nbm}"
productdir="${cluster}"
module="${module.jar}"
homepage="${nbm.homepage}"
distribution="${nbm.distribution}"
needsrestart="${nbm.needs.restart}"
global="${nbm.is.global}"
preferredupdate="${nbm.is.preferredupdate}"
usepack200="${use.pack200}"
pack200excludes="${pack200.excludes}"
alwayscreatenbm="${nbm.always.create}"
targetcluster="${nbm.target.cluster}"
releasedate="${nbm.release.date}"
moduleauthor="${nbm.module.author}"
locales="${nbm.locales}"
>
<license file="${license.file.override}"/>
<signature keystore="${keystore}" storepass="${storepass}" alias="${nbm_alias}"/>
<updaterjar>
<pathfileset>
<path refid="cluster.path.id"/>
<filename name="modules/ext/updater.jar"/>
</pathfileset>
</updaterjar>
<executables refid="module.executable.files"/>
<extranbmfiles refid="extra.nbm.files"/>
</makenbm>
</target>