JAR file signature file format

Question

I’m trying to write my own banner verification application for BlackBerry. However, since BlackBerry does not support the java.util.jar package, it remains for us to write the verification logic.

Can any authority tell me the internal structure of the .DSA / .RSA file, which can be found in the signed jar file? We are stuck in the verification process because there is no documented method for extracting a publicly available signature that was used to sign the jar from the signature block file.

Any help in this regard would be helpful and appreciated.

thank

Basilio

Answer 1

When installing JDK, src.zip file appears

This file contains the JDK libs source code.

JarEntry

: getCertificates() getCodeSigners()

Answer 2

jar .