Solved

Lock down the .war file

Posted on 2004-10-07
11
959 Views
Last Modified: 2010-04-01
Hi,
I have developed a JSP application that i want to give to a client to test. I do not want the client to be able to see the code. Is it possible to password protect the war file?

Thanks
0
Comment
Question by:gayuk
  • 4
  • 3
  • 2
  • +1
11 Comments
 

Expert Comment

by:cchaganti
ID: 12254403
You can compile the JSP files (using JSPC) and while WARring, remove all the original JSP files from the WAR file.
they will just see the compiled code. (I am assuming that they are deploying the war file given by you)...

0
 
LVL 50

Expert Comment

by:Ryan Chong
ID: 12256110
Try zip your war file with Winzip, and set a password, for example.
0
 

Author Comment

by:gayuk
ID: 12259144
ryancys,
I tried that but it does not work. The app server tries to unzip it for recompilation and that fails..
0
Gigs: Get Your Project Delivered by an Expert

Select from freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely and get projects done right.

 
LVL 50

Expert Comment

by:Ryan Chong
ID: 12260576
What i mean is 1st try to compress your files into a war file 1st, and then simply use any zipping tool (in this case, Winzip) to zip the war file and make it password protected. Actually it's the way i've done for my previous client all the time when i deployed the jsp applications.
0
 

Author Comment

by:gayuk
ID: 12261521
ryancys,

I am not sure i understand. You can also create a war file through the Zip utility..Even if I were to create a war file and zip it up, would you unzip it before deploying it..

When you did this.. did you just put the zip file in the appropriate directory and leave it at that or did you unzip it and then deploy it?
I am sorry if is sound confused.. I am :-)

Thanks
0
 
LVL 50

Expert Comment

by:Ryan Chong
ID: 12261637
>>I am not sure i understand. You can also create a war file through the Zip utility
Actually i'm not too sure about that, really.. ;-)

Yet, I used to create war file from command prompt, like:

C:\jdk\bin\myApp>c:\jdk\bin\jar cvf c:\jdk\bin\myApp.war *.*

where i usually copy the whole application folder to bin folder, and then i zip the created myApp.war file with Winzip, and make it password protected.

and once it's deployed on my client's end. He will unzip the file, and then the client get the myApp.war file. And he will restart it's Servlet Container (Tomcat in this case), and then the war file is 'unwar'ed.

The above may also sounds weird, those are what i learn myself and it works for me so far for this couple of years ;-)

Correct me or other guys may have better approach 8-)
0
 

Author Comment

by:gayuk
ID: 12262076
Okay...
I see what you mean.. However, what i want to do is to secure the war file itself. I don't want the client to see the application code..
0
 

Author Comment

by:gayuk
ID: 12262094
cchangti,
Does using JSPC allow me to deploy on different servlet containers?.. I see this as a good option but is it supported by other app severs other than tomcat?

Thanks
0
 

Expert Comment

by:cchaganti
ID: 12277688
Yes, it is supported. But, you need to jspc with different application servers (effectively creating one war file per app server)...
for example you will use weblogic.jspc xyz.war for weblogic etc...,
0
 

Accepted Solution

by:
modulo earned 0 total points
ID: 12537105
PAQed - no points refunded (of 25)

modulo
Community Support Moderator
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
reflections, dynamic class loading 3 68
parse example 13 94
using if condition without JSTL 2 108
how to hide hide popup page refresh second time? 10 122
FAQ pages provide a simple way for you to supply and for customers to find answers to the most common questions about your company. Here are six reasons why your company website should have a FAQ page
One of the biggest threats in the cyber realm pertains to advanced persistent threats (APTs). This paper is a compare and contrast of Russian and Chinese APT's.
In a recent question (https://www.experts-exchange.com/questions/28997919/Pagination-in-Adobe-Acrobat.html) here at Experts Exchange, a member asked how to add page numbers to a PDF file using Adobe Acrobat XI Pro. This short video Micro Tutorial sh…
Although Jacob Bernoulli (1654-1705) has been credited as the creator of "Binomial Distribution Table", Gottfried Leibniz (1646-1716) did his dissertation on the subject in 1666; Leibniz you may recall is the co-inventor of "Calculus" and beat Isaac…

808 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question