https://issues.apache.org/bugzilla/show_bug.cgi?id=52489
Bug #: 52489
Summary: Enhancement request for codesigning of war files
Product: Tomcat 7
Version: 7.0.23
Platform: PC
OS/Version: Linux
Status: NEW
Severity: enhancement
Priority: P2
Component: Catalina
AssignedTo: dev@tomcat.apache.org
ReportedBy: tomcatmail...@ttsecure.org
Classification: Unclassified
Created attachment 28177
--> https://issues.apache.org/bugzilla/attachment.cgi?id=28177
Patch for enabling signature support for .war files (signing classes under
/WEB-INF/classes/)
Hi,
while it is easy to run Tomcat with a security manager when the webapps are
included in /WEB-INF/lib/*.jar this is not possible right now when using files
under /WEB-INF/classes/. As I am in the situation of having to keep all classes
under /WEB-INF/classes/, I wrote a patch to add this capability for Tomcat. So
with this patch it is possible to sign a .war file and to have the classes
contained in the .war files signed and run correctly withing a Tomcat with
enabled security manager.
Currently only packed war files are supported (so uncompress in server.xml must
be false). Perhaps there is an easier way of getting the file name of the
original war file, enabling a support also for uncompressed .war files.
Attached is the patch file in diff -u format.
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
