File APIs for Java Developers
Manipulate DOC, XLS, PPT, PDF and many others from your application.
The moose likes JNLP and Web Start and the fly likes Verified signed, but jnlp says unsigned. Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login
JavaRanch » Java Forums » Java » JNLP and Web Start
Bookmark "Verified signed, but jnlp says unsigned." Watch "Verified signed, but jnlp says unsigned." New topic

Verified signed, but jnlp says unsigned.

Nick Jp George

Joined: Oct 08, 2010
Posts: 18
It's astonishing to me how hard it is to find reliable tutorials for jarsigning- nothing seems to take it from start to finish to sign a jar. I finally found this one:

which just says to use the three simple lines

1. keytool -genkey -keystore myKeyStore -alias me

2. keytool -selfcert -keystore myKeyStore -alias me

3. jarsigner -keystore myKeyStore jarfile.jar me

These I did, then I ran jarsigner -verify on the jar, and it says it's signed. However, when I try to run a jnlp with it, I get "Found unsigned resource in: http://localhost/IsoLauncher.jar"
(IsoLauncher is the jar I signed/verified).

It burns me up how much harder this is than it seems like it should be.

Andrew Watson

Joined: Dec 02, 2010
Posts: 25

Have you checked the Manifest file in fact? I mean is it contains classes signature?
You just open your jar file and check.

If manifest file does not contain project signed classes info that means your app is really not signed

I agree. Here's the link:
subject: Verified signed, but jnlp says unsigned.
It's not a secret anymore!