javasecurityjar-signing

How to prevent loading of unsigned jars?


In my application, noticed that among signed jar files even unsigned jar file are also getting loaded while invoke application, so to ensure the security i need guidance to prevent loading of any unsigned jars

EDIT:

How to identify / retrieve the Jar signature using ClassLoader


Solution

  • We can use jarverifier in the link, to check whether the jar has completely signed not and at the same time it can be used to verify the certificate of jar file.