签署我的 Jar 文件答案

【问题标题】：Signing my Jar files签署我的 Jar 文件
【发布时间】：2013-01-13 12:50:04
【问题描述】：

我已经制作了一个 Java Swing GUI 并试图将它放到一个网站上，我已将我的 html 文件放在 lwjgl_jar 文件夹中，这解决了 my previous problem 无法找到 AppletLoader 但我现在得到一个新错误：

Permissions for Applet Refused. Please accept the permissions dialogue to allow the applet to continue the loading process.

告诉Java“这次运行”后出现错误。所以我在网上搜索，发现我的问题的解决方案是我的 jar 文件尚未签名，考虑到我使用的是我认为应该已经签名的 Slick 和 lwjgl 文件，这很奇怪，但是我的 racegame.jar 包含我的小程序可能需要签名，所以我关注了this guide to signing jars：

进入最后一步并输入：jarsigner -keystore myKeystore racegame.jar myself 签署我的racegame.jar，但它说：

jarsigner: unable to open jar file: racegame.jar

我尝试使用的任何其他 jar 文件也会出现此错误。

为什么不打开 jar 文件并对其进行签名？遵循并测试了所有其他步骤，与指南中显示的完全一样。

【问题讨论】：

docs.oracle.com/javase/1.4.2/docs/tooldocs/windows/… 和这个比较一下。
请看一下这个document，它可能对你有帮助。虽然该链接仅在我的计算机运行时才有效（ON STATE）。
谢谢 Gagandeep，您的回答帮助我解决了我的问题，请回答我的问题，以便我选择您的答案。

标签： java jar digital-signature signing

【解决方案1】：

我曾经在网上找到这篇关于How to sign the JAR Files的文章，这可能有一些内容，对你有一定的帮助。请看：

Sign All Applet JAR files

Applets are back! And now applets can do more than ever before thanks to 
signed JAR files. By signing your JARs, you can get access to the filesystem 
and other resources that were previously off-limits, provided the user 
grants your applet those privileges. And signing JAR files is now very easy 
thanks to tools bundled with the JDK. However, be certain to sign all JAR files 
used by your Java applet. If you sign the JAR file with your main applet class, 
your applet will launch. If it later uses classes from another JAR file, though, 
you can run into trouble. If the newly-loaded class tries a restricted operation 
and its JAR file isn't signed, your applet will fail at that point with a 
security exception. Rather than waiting for this and debugging it when it occurs, 
save yourself the trouble and sign all of your JAR files up front.

You can create your own certificate using tools provided by the JDK. 
keytool -genkey -alias mykey lets you create your own certificate. Be sure to 
specify an expiration date far in the future with -validity 1000. The default is 
only 6 months.

Sign your JAR files with jarsigner my.jar mykey (where my.jar is the name of 
the jar file to sign).

Deploy all of your JAR files to a folder on your web server, add an HTML page 
with the applet tag, and let the world enjoy your new applet with powerful 
permissions.

keytool -genkey -v -key store mycompany.keystore -alias myalias_goes_here -keyalg RSA -keysize 2048 -validity 10000

【讨论】：