JDK-7062850 : Submit changes for "Jar As BLOB" for security review
  • Type: Enhancement
  • Status: Resolved
  • Resolution: Fixed
  • Component: deploy
  • Sub-Component: deployment_toolkit
  • Priority: P3
  • Affected Version: 7
  • OS: generic
  • CPU: generic
  • Submit Date: 2011-07-05
  • Updated Date: 2013-09-12
  • Resolved Date: 2011-08-17
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availabitlity Release.

To download the current JDK release, click here.
JDK 7 JDK 8
7u2 b03Resolved 8Resolved
Description
- Enable the feature by remove the use of SignedAsBLOBJarVerifier.ENABLE flag.
- Submit the change as described here for review by security team:
  http://j2se.sfbay.sun.com/web/bin/view/Deployment/SignJarAsBLOB
- Add more unit tests if possible, particularly cases of .JARJAR archives.