JDK-6967771 : 64 bit Windows JRE binary .exe files are not signed. Nor are 32 bit or 64 bit JDK exes
  • Type: Bug
  • Component: install
  • Sub-Component: install
  • Affected Version: 6u21,7
  • Priority: P2
  • Status: Closed
  • Resolution: Fixed
  • OS: generic,windows_xp
  • CPU: generic
  • Submitted: 2010-07-08
  • Updated: 2010-11-24
  • Resolved: 2010-09-08
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 6 JDK 7
6u22 b02Fixed 7Fixed
Related Reports
Duplicate :  
JDK-6841285 - amd64 windows installers are not signed
Relates :  
JDK-6991411 - Most JRE/JDK Windows 32 bit and 64 bit dlls are not signed
Description
Since 6u10 we've apparently signed all the 32 bit JRE .exes (see bug 6688899).
However :

1) install/make/Makefile skips the "sign" subdirectory for 64 bit apps.
I can't think of any valid reason to do this, except for being a hold
over from before we had a proper 64 bit installer and it wasn't thought
necessary.

2) The "sign" subdirectory as far as I can tell looks at JRE_IMAGE_DIR
which is used only to create the JRE installer.
This apparently means that all binaries installed by the JDK installer
(both those in jdk/bin and jdk/jre/bin) are unsigned.


This is a very confusing situation.
Comments
EVALUATION While we're in here, we need to make sure the 64-bit JDK installer exe is signed also. I marked a bug for that as a duplicate of this.
24-11-2010
EVALUATION This fix addressed only .exe's. dlls are not yet signed. To track that I submitted 6991411 : Most JRE/JDK Windows 32 bit and 64 bit dlls are not signed
12-10-2010
EVALUATION Updated the makefiles for signing the 64-bit binaries in both JDK_IMAGE_DIR AND JRE_IMAGE_DIR, as well signing the 32-bit binaries in JDK_IMAGE_DIR.
14-07-2010
EVALUATION As far as I can tell that would fix the binaries installed by the 64 bit JRE installer, but not any of the binaries installed by the JDK installer. My guess is the sign/Makefile also needs to be updated to also iterate over the "JDK_IMAGE_DIR" or similar.
13-07-2010
EVALUATION The fix is to allow 64-bit builds to step into install/make/sign/Makefile
13-07-2010