jnlp.sign.jars [since 6.0] - defaults to true. If set to false the jars 

  will not be signed, only the main (startup) jar. This should allow for 

  faster startup but might compromise JNLP security. Use with extreme care.

    <!-- The following property is needed when running with unsigned jars: -->

    <property name="netbeans.jnlp.fixPolicy" value="$${netbeans.jnlp.fixPolicy}"/>

    <extension name='branding' href='branding.jnlp' />

        <echo file="branding.jnlp"><![CDATA[<?xml version="1.0" encoding="UTF-8"?>

<jnlp spec="1.0+" codebase="${jnlp.codebase}">

  <information>

      <title>$${app.title}</title>

      <vendor>$${app.title} vendor</vendor>

      <description>$${app.name} application</description>

      <icon href="$${app.icon}"/>

  </information>

  <security>$${jnlp.permissions}</security>

  <resources>

    $${jnlp.branding.jars}

  </resources>

  <component-desc/>

</jnlp>  

]]></echo>

            signjars="${jnlp.sign.jars}"

    <target name="set-all-permissions" depends="check-signjars" if="unsign-the-jars">

        <property name="jnlp.permissions" value="&lt;security/&gt;"/>

    </target>

    <target name="set-empty-permissions" depends="check-signjars" unless="unsign-the-jars">

        <property name="jnlp.permissions" value="&lt;security&gt;&lt;all-permissions/&gt;&lt;/security&gt;"/>

    </target>

    <target name="check-signjars">

        <condition property="unsign-the-jars">

            <isfalse value="jnlp.sign.jars"/>

        </condition>

    </target>

            <property name="jnlp.sign.jars" value="${jnlp.sign.jars}"/>

            <property name="jnlp.permissions" value="${jnlp.permissions}"/>

        <condition property="netbeans.jnlp.fixPolicy">

            <isfalse value="jnlp.sign.jars"/>

        </condition>

        <!-- Anyone knows a better way to negate a property value? -->

        <condition property="netbeans.jnlp.fixPolicy" value="false">

            <istrue value="jnlp.sign.jars"/>

        </condition>

                <replacestring from="$${netbeans.jnlp.fixPolicy}" to="${netbeans.jnlp.fixPolicy}"/>

        <copy file="branding.jnlp" tofile="${jnlp.dest.dir}/branding.jnlp">

            <filterchain>

                <replacestring from="$${jnlp.branding.jars}" to="${jnlp.branding.jars}"/>

                <replacestring from="$${app.name}" to="${app.name}"/>

                <replacestring from="$${app.title}" to="${app.title}"/>

                <replacestring from="$${app.icon}" to="master.png"/>

                <replacestring from="$${jnlp.permissions}" to="${jnlp.permissions}"/>

            </filterchain>

        </copy>

    <target name="sign-branding-jars" unless="unsign-the-jars" depends="copy-branding-jars">

        <signjar

            alias="${jnlp.signjar.alias}" 

            keystore="${jnlp.signjar.keystore}" 

            storepass="${jnlp.signjar.password}" 

        >

            <fileset dir="${jnlp.dest.dir}/branding">

                <include name="*_${branding.token}.jar"/>

            </fileset>

        </signjar>

    </target>

    <target name="copy-branding" depends="copy-branding-jars, sign-branding-jars"/>

    <target name="copy-branding-jars">

        <mkdir dir="${jnlp.dest.dir}/branding"/>

        <copy todir="${jnlp.dest.dir}/branding" flatten="true">

            <fileset dir="${cluster}">

                <include name="**/locale/*.jar"/>

            </fileset>

        </copy>

    </target>

    private boolean signJars = true;

    /**

     * Whether the final jars should be signed or not. Deafults to true

     * (if not supplied).

     */

    public void setSignJars(boolean s) {

        this.signJars = s;

    }

            signjars="${jnlp.sign.jars}"

    public void testGenerateJNLPAndUnSignedJarForSimpleModule() throws Exception {

        Manifest m;

        m = ModuleDependenciesTest.createManifest ();

        m.getMainAttributes ().putValue ("OpenIDE-Module", "org.my.module/3");

        File simpleJar = generateJar (new String[0], m);

        File parent = simpleJar.getParentFile ();

        File output = new File(parent, "output");

        File ks = generateKeystore("jnlp", "netbeans-test");

        java.io.File f = PublicPackagesInProjectizedXMLTest.extractString (

            "<?xml version=\"1.0\" encoding=\"UTF-8\"?>" +

            "<project name=\"Test Arch\" basedir=\".\" default=\"all\" >" +

            "  <taskdef name=\"jnlp\" classname=\"org.netbeans.nbbuild.MakeJNLP\" classpath=\"${nb_all}/nbbuild/nbantext.jar\"/>" +

            "<target name=\"all\" >" +

            "  <mkdir dir='" + output + "' />" + 

            "  <jnlp dir='" + output + "' alias='jnlp' storepass='netbeans-test' keystore='" + ks + "' signjars='false' >" +

            "    <modules dir='" + parent + "' >" +

            "      <include name='" + simpleJar.getName() + "' />" +

            "    </modules>" +

            "  </jnlp>" +

            "</target>" +

            "</project>"

        );

        PublicPackagesInProjectizedXMLTest.execute (f, new String[] { "-verbose" });

        assertFilenames(output, "org-my-module.jnlp", "org-my-module/s0.jar");

        File jnlp = new File(output, "org-my-module.jnlp");

        String res = ModuleDependenciesTest.readFile (jnlp);

        assertTrue ("Component JNLP type: " + res, res.indexOf ("<component-desc/>") >= 0);

        assertTrue ("We support all permitions by default: " + res, res.indexOf ("<all-permissions/>") >= 0);

        Matcher match = Pattern.compile(".*codebase=['\\\"]([^'\\\"]*)['\\\"]").matcher(res);

        assertTrue("codebase is there", match.find());

        assertEquals("one group found", 1, match.groupCount());

        String base = match.group(1);

        assertEquals("By default the dest directory is $$codebase: ", "$$codebase", base);

        File jar = new File(output, "org-my-module/s0.jar");

        JarFile signed = new JarFile(jar);

        Enumeration it = signed.entries();

        while (it.hasMoreElements()) {

            JarEntry entry = (JarEntry)it.nextElement();

            if (entry.getName().endsWith(".SF")) {

                fail ("File should not be signed: " + jar);

            }

        }

    }

        }

    }

    public void testGenerateJNLPAndUnSignedJarForSimpleLocalizedModule() throws Exception {

        Manifest m;

        m = ModuleDependenciesTest.createManifest ();

        m.getMainAttributes ().putValue ("OpenIDE-Module", "org.my.module/3");

        File simpleJar = generateJar ("modules/", new String[0], m, null);

        File parent = simpleJar.getParentFile ();

        File localizedJarCZ = generateJar("modules/locale/", new String[0], ModuleDependenciesTest.createManifest(), null);

        assertEquals("There need to have the same name", simpleJar.getName(), localizedJarCZ.getName());

        assertTrue("Successful rename", localizedJarCZ.renameTo(new File(localizedJarCZ.getParent(), "0_cs.jar")));

        File localizedJarZH = generateJar("modules/locale/", new String[0], ModuleDependenciesTest.createManifest(), null);

        assertEquals("There need to have the same name", simpleJar.getName(), localizedJarZH.getName());

        assertTrue("Successful rename", localizedJarZH.renameTo(new File(localizedJarCZ.getParent(), "0_zh_CN.jar")));

        File localizedJarJA = generateJar("modules/locale/", new String[0], ModuleDependenciesTest.createManifest(), null);

        assertEquals("There need to have the same name", simpleJar.getName(), localizedJarJA.getName());

        assertTrue("Successful rename", localizedJarJA.renameTo(new File(localizedJarCZ.getParent(), "0_ja.jar")));

        File updateTracking = new File(getWorkDir(), "update_tracking");

        updateTracking.mkdirs();

        assertTrue("Created", updateTracking.isDirectory());

        File trackingFile = new File(updateTracking, "org-my-module.xml");

        FileWriter w = new FileWriter(trackingFile);

        w.write(

"<?xml version='1.0' encoding='UTF-8'?>\n" +

"<module codename='org.my.module/3'>\n" +

    "<module_version specification_version='3.22' origin='installer' last='true' install_time='1124194231878'>\n" +

        "<file name='modules/" + simpleJar.getName() + "' crc='3245456472'/>\n" +

        "<file name='config/Modules/org-my-module.xml' crc='43434' />\n" +

        "<file name='modules/locale/0_cs.jar' crc='454244' />\n" +

        "<file name='modules/locale/0_ja.jar' crc='779831' />\n" +

        "<file name='modules/locale/0_zh_CN.jar' crc='475345' />\n" +

"    </module_version>\n" +

"</module>\n"

        );

        w.close();

        File output = new File(parent, "output");

        File ks = generateKeystore("jnlp", "netbeans-test");

        java.io.File f = PublicPackagesInProjectizedXMLTest.extractString (

            "<?xml version=\"1.0\" encoding=\"UTF-8\"?>" +

            "<project name=\"Test Arch\" basedir=\".\" default=\"all\" >" +

            "  <taskdef name=\"jnlp\" classname=\"org.netbeans.nbbuild.MakeJNLP\" classpath=\"${nb_all}/nbbuild/nbantext.jar\"/>" +

            "<target name=\"all\" >" +

            "  <mkdir dir='" + output + "' />" + 

            "  <jnlp dir='" + output + "' alias='jnlp' storepass='netbeans-test' keystore='" + ks + "' verify='true' signjars='false' >" +

            "    <modules dir='" + parent + "' >" +

            "      <include name='" + simpleJar.getName() + "' />" +

            "    </modules>" +

            "  </jnlp>" +

            "</target>" +

            "</project>"

        );

        PublicPackagesInProjectizedXMLTest.execute (f, new String[] { "-verbose" });

        assertFilenames(output, "org-my-module.jnlp",

                "org-my-module/0.jar",

                "org-my-module/locale-0_cs.jar",

                "org-my-module/locale-0_zh_CN.jar",

                "org-my-module/locale-0_ja.jar");

        File jnlp = new File(output, "org-my-module.jnlp");

        String res = ModuleDependenciesTest.readFile (jnlp);

        assertTrue ("Component JNLP type: " + res, res.indexOf ("<component-desc/>") >= 0);

        assertTrue ("We support all permissions by default: " + res, res.indexOf ("<all-permissions/>") >= 0);

        Matcher match = Pattern.compile(".*codebase=['\\\"]([^'\\\"]*)['\\\"]").matcher(res);

        assertTrue("codebase is there", match.find());

        assertEquals("one group found", 1, match.groupCount());

        String base = match.group(1);

        assertEquals("By default the dest directory is $$codebase: ", "$$codebase", base);

        assertResource(res, "cs", "org-my-module/locale-0_cs.jar");

        assertResource(res, "ja", "org-my-module/locale-0_ja.jar");

        assertResource(res, "zh_CN", "org-my-module/locale-0_zh_CN.jar");

        for (File jar : new File(output, "org-my-module").listFiles()) {

            if (!jar.getName().endsWith(".jar")) {

                continue;

            }

            JarFile signed = new JarFile(jar);

            Enumeration it = signed.entries();

            while (it.hasMoreElements()) {

                JarEntry entry = (JarEntry)it.nextElement();

                if (entry.getName().endsWith(".SF")) {

                    fail ("File does not seem to be signed: " + jar);

                }

            }