title: Sign JAR without JRE but with OpenSSL?
body: <p>Our system has Java and C parts. On the C side, we are signing certain data using command-line scripts calling OpenSSL commands. Now we want to sign some JARs too. We already have established PKI (what is important for this case - private keys are accessible) "on the C side" and we try to avoid duplicating/extending that to the Java side.</p>
  
  <p>What would be an easy way to get the JAR signed for someone who does not want to have JRE (but has OpenSSL)? I.e. I want to create the correct <code>MANIFEST.MF</code>, <code>KEY.SF</code> and <code>KEY.?SA</code> for my JAR. Their format is not complicated and this seems to be doable with some scripting. Has anyone done this before?</p>