JDK-4649703 : Web Start should consider time-of-signing when verifying signed jars
  • Type: Enhancement
  • Component: deploy
  • Sub-Component: deployment_toolkit
  • Affected Version: jaws-1.0,1.4.0
  • Priority: P3
  • Status: Resolved
  • Resolution: Fixed
  • OS: solaris_7,solaris_8
  • CPU: generic,sparc
  • Submitted: 2002-03-08
  • Updated: 2003-11-17
  • Resolved: 2003-11-17
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
Other
5.0 tigerFixed
Related Reports
Duplicate :  
JDK-4373294 - Warning message about expired certificate
Relates :  
JDK-4649690 - Java Plug-in should consider time-of-signing when verifying signed jars
Relates :  
JDK-4523234 - Timestamped Signatures
Relates :  
JDK-4500302 - Verification of signed jars does not consider time-of-signing.
Description
RFE 4500302 actually requests several enhancements in various places: JDK, jarsigner, PlugIn and Web Start. There is another rfe (4523234) tracking
work needed in JDK to support timestamped signatures. 

We plan to implement rfe 4523234 for Tiger (pending Tiger team approval, etc.).
Once rfe 4523234 is done, Web Start should consider time-of-signing when verifying signed jar.

So I'm filing this rfe to track the work needed in Web Start (if any). I've filed rfe 4649690 to track work needed in PlugIn (if any).  RFE 4500302 will be used to track enhancements needed in jarsigner. I'll add notes in rfe 4500302.
Comments
CONVERTED DATA BugTraq+ Release Management Values COMMIT TO FIX: tiger FIXED IN: tiger tiger-beta INTEGRATED IN: tiger tiger-b29
14-06-2004
EVALUATION We should start displaying a stronger warning message for expired certificates for Mantis. ###@###.### 2002-07-23 this will be a tiger project, together with 4646418 ###@###.### 2002-11-05 Mark it as RFE. ###@###.### 2003-01-13 moving catagory to java_deployment since affected code will be in common code with plugin. ###@###.### 2003-01-14 Fix in progress by Dennis. ###@###.### 2003-10-09
14-01-2003