...
Compliant Solution (jarsigner
)
Users can ������������‚�š�š�š�š�š������������€š�š�š�š�š��������������€š�š�š�š�š�š�������������‚�š�š�š�š�š�? but usually do not ������������‚�š�š�š�š�š������������€š�š�š�š�š��������������€š�š�š�š�š�š�������������‚�š�š�š�š�š�? explicitly check JAR file signatures at the command line. This may be an adequate solution for programs that require manual installation of JAR files. Any malicious tampering results in a SecurityException
when the jarsigner
tool is invoked with the -verify
option.
...