Signatures not stripped from jar files when being added as <jar>

Description

introduced stripping signatures from jar files when being merged to the installer jar (as a result of defining them in the <jar> tag), but the implementation does not work reliably. The META-INF/.RSA|.DSA files are still being merged resulting in breaking the class loading by mixing signed and unsigned bytecode.

Environment

None

Assignee

René Krell

Reporter

René Krell

Impact

Functional - non-breaking and safe in existing environments

Components

Sprint

None

Fix versions

Affects versions

Priority

Medium
Configure