Signed EAR files

cfillot Apr 15, 2013 5:41 PM

Hello all,

Is there a way to make Jboss AS accept only EAR files signed with jarsigner ? the idea would be to deploy only trusted apps on a server.

Thanks in advance for any help,

Christophe

1. Re: Signed EAR files

nickarls Apr 16, 2013 1:46 AM (in response to cfillot)

I don't recall one. But one would think it wouldn't be that hard to write a deployment processor that would check that.
In most scenarios, when people have disk access to your server, it's game over ;-)
1 of 1 people found this helpful
Actions
2. Re: Signed EAR files

cfillot Apr 16, 2013 6:59 AM (in response to nickarls)

Thanks, I'll take a look at deployement processors.

Of course I agree for the second part But in my case people wouldn't have access to the server filesystems.
Actions