Skip to content

关于加密jar包的java.lang.SecurityException问题 #487

@coderbetwin

Description

@coderbetwin

private val JAR_SIGNATURE_EXTENSIONS = setOf("SF", "RSA", "DSA", "EC")

private fun isJarSignatureRelatedFiles(name: String): Boolean {
return name.startsWith("META-INF/") && name.substringAfterLast('.') in JAR_SIGNATURE_EXTENSIONS
}

目前的判断逻辑是META-INF路径下对应的签名文件不处理,避免出问题,但是我发现一个问题我这有一个库org.eclipse:paho:org.eclipse.paho.client.mqttv3:1.2.0,他的META-INF/MANIFEST.MF里也放置了sha256相关信息,所以依然存在报错 java.util.concurrent.ExecutionException: java.util.concurrent.ExecutionException: java.lang.SecurityException: SHA-256 digest error for org/eclipse/paho/client/mqttv3/internal/ClientState.class

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions