Hi EJBCA Team,

I am trying to deploy a signed ejbca.ear package in jboss and want to verify its signature using Security Manager configuration. whenever jboss start/stop, it should verify the signature and if the signature verification is failed jboss stop the ejbca deployment. I just go through the blow document [1] but i couldn't understand either it can verify the signature at the time of deployment or i should verify it manually using jarsigner verify command.

I don't have much understanding of the signed.ear deployment, please guide me either i am thinking on the right track.

[1] http://tirnanog.ls.fi.upm.es:8080/ejbca/doc/adminguide.html#Code%20signing