|
 |
055e32 |
commit 09bcd3ebb639af6cfd83ff2203ffeb80a59cc0eb
|
|
|
055e32 |
Author: Jiri Vanek <jvanek@redhat.com>
|
|
|
055e32 |
Date: Fri Jun 28 16:05:35 2019 +0200
|
|
|
055e32 |
|
|
|
055e32 |
All files, except signaturre files, are now checked for signatures
|
|
|
055e32 |
|
|
|
055e32 |
diff --git a/netx/net/sourceforge/jnlp/tools/JarCertVerifier.java b/netx/net/sourceforge/jnlp/tools/JarCertVerifier.java
|
|
|
055e32 |
index 759bedfb..cabfb3c5 100644
|
|
|
055e32 |
--- a/netx/net/sourceforge/jnlp/tools/JarCertVerifier.java
|
|
|
055e32 |
+++ b/netx/net/sourceforge/jnlp/tools/JarCertVerifier.java
|
|
|
055e32 |
@@ -41,6 +41,7 @@
|
|
|
055e32 |
import java.util.Map;
|
|
|
055e32 |
import java.util.Vector;
|
|
|
055e32 |
import java.util.jar.JarEntry;
|
|
|
055e32 |
+import java.util.regex.Pattern;
|
|
|
055e32 |
|
|
|
055e32 |
import net.sourceforge.jnlp.JARDesc;
|
|
|
055e32 |
import net.sourceforge.jnlp.JNLPFile;
|
|
|
055e32 |
@@ -67,6 +68,7 @@
|
|
|
055e32 |
public class JarCertVerifier implements CertVerifier {
|
|
|
055e32 |
|
|
|
055e32 |
private static final String META_INF = "META-INF/";
|
|
|
055e32 |
+ private static final Pattern SIG = Pattern.compile(".*" + META_INF + "SIG-.*");
|
|
|
055e32 |
|
|
|
055e32 |
// prefix for new signature-related files in META-INF directory
|
|
|
055e32 |
private static final String SIG_PREFIX = META_INF + "SIG-";
|
|
|
055e32 |
@@ -500,12 +502,20 @@
|
|
|
055e32 |
|
|
|
055e32 |
/**
|
|
|
055e32 |
* Returns whether a file is in META-INF, and thus does not require signing.
|
|
|
055e32 |
- *
|
|
|
055e32 |
+ *
|
|
|
055e32 |
* Signature-related files under META-INF include: . META-INF/MANIFEST.MF . META-INF/SIG-* . META-INF/*.SF . META-INF/*.DSA . META-INF/*.RSA
|
|
|
055e32 |
*/
|
|
|
055e32 |
static boolean isMetaInfFile(String name) {
|
|
|
055e32 |
- String ucName = name.toUpperCase();
|
|
|
055e32 |
- return ucName.startsWith(META_INF);
|
|
|
055e32 |
+ if (name.endsWith("class")) {
|
|
|
055e32 |
+ return false;
|
|
|
055e32 |
+ }
|
|
|
055e32 |
+ return name.startsWith(META_INF) && (
|
|
|
055e32 |
+ name.endsWith(".MF") ||
|
|
|
055e32 |
+ name.endsWith(".SF") ||
|
|
|
055e32 |
+ name.endsWith(".DSA") ||
|
|
|
055e32 |
+ name.endsWith(".RSA") ||
|
|
|
055e32 |
+ SIG.matcher(name).matches()
|
|
|
055e32 |
+ );
|
|
|
055e32 |
}
|
|
|
055e32 |
|
|
|
055e32 |
/**
|
|
|
055e32 |
diff --git a/tests/netx/unit/net/sourceforge/jnlp/tools/JarCertVerifierTest.java b/tests/netx/unit/net/sourceforge/jnlp/tools/JarCertVerifierTest.java
|
|
|
055e32 |
index 4661fb87..44253e08 100644
|
|
|
055e32 |
--- a/tests/netx/unit/net/sourceforge/jnlp/tools/JarCertVerifierTest.java
|
|
|
055e32 |
+++ b/tests/netx/unit/net/sourceforge/jnlp/tools/JarCertVerifierTest.java
|
|
|
055e32 |
@@ -58,9 +58,22 @@ public class JarCertVerifierTest {
|
|
|
055e32 |
@Test
|
|
|
055e32 |
public void testIsMetaInfFile() {
|
|
|
055e32 |
final String METAINF = "META-INF";
|
|
|
055e32 |
+ assertTrue(JarCertVerifier.isMetaInfFile(METAINF + "/file.MF"));
|
|
|
055e32 |
+ assertTrue(JarCertVerifier.isMetaInfFile(METAINF + "/file.SF"));
|
|
|
055e32 |
+ assertTrue(JarCertVerifier.isMetaInfFile(METAINF + "/file.DSA"));
|
|
|
055e32 |
+ assertTrue(JarCertVerifier.isMetaInfFile(METAINF + "/file.RSA"));
|
|
|
055e32 |
+ assertTrue(JarCertVerifier.isMetaInfFile(METAINF + "/SIG-blah.blah"));
|
|
|
055e32 |
+
|
|
|
055e32 |
+ assertFalse(JarCertVerifier.isMetaInfFile(METAINF + "/file.MF.class"));
|
|
|
055e32 |
+ assertFalse(JarCertVerifier.isMetaInfFile(METAINF + "/file.SF.class"));
|
|
|
055e32 |
+ assertFalse(JarCertVerifier.isMetaInfFile(METAINF + "/file.DSA.class"));
|
|
|
055e32 |
+ assertFalse(JarCertVerifier.isMetaInfFile(METAINF + "/file.RSA.class"));
|
|
|
055e32 |
+ assertFalse(JarCertVerifier.isMetaInfFile(METAINF + "/SIG-blah.blah.class"));
|
|
|
055e32 |
+
|
|
|
055e32 |
assertFalse(JarCertVerifier.isMetaInfFile("some_dir/" + METAINF + "/filename"));
|
|
|
055e32 |
assertFalse(JarCertVerifier.isMetaInfFile(METAINF + "filename"));
|
|
|
055e32 |
- assertTrue(JarCertVerifier.isMetaInfFile(METAINF + "/filename"));
|
|
|
055e32 |
+ assertFalse(JarCertVerifier.isMetaInfFile(METAINF + "/filename"));
|
|
|
055e32 |
+ assertFalse(JarCertVerifier.isMetaInfFile(METAINF + "/filename"));
|
|
|
055e32 |
}
|
|
|
055e32 |
|
|
|
055e32 |
class JarCertVerifierEntry extends JarEntry {
|