jar signing may be applied to WAR/EAR files?
843811Oct 16 2003 — edited Oct 17 2003Greetings,
I wonder if the WAR/EAR files (J2EE related) can be also affected by signing it. I mean, when a signed jar file is updated with class, the JVM will throw an error about the signature of that class doesn't match the class file.
Now, since a WAR/EAR file is a JAR file but with JAR files instead classes files, I wonder if signing a WAR/EAR file and if someone update it without signing, the application server (e.g., tomcat) will verify the signature?
If true, that would be just great since I may have resources (JSP files and similar stuff) that would be just great if I could verify its integrity.
thanks,
Pedro Salazar.