Subject: Re: bug#45675: Zip-based archives store timestamps

From: Julien Lepiller <[email-masked]>
Date: Tue, 05 Jan 2021 10:17:53 -0500

For java packages, we have a strip-jar-timestamps phase in the ant-build-system.

Le 5 janvier 2021 08:10:37 GMT-05:00, "Miguel Ángel Arruga Vivas" <[email-masked]> a écrit :
>A procedure like reset-gzip-timestamp should be useful for
>reproducibility purposes, adapted to zip based archives as Smalltalk's
>STAR or Java's JAR binary formats, as some or all of their contents are
>generated usually at build time.
>
>On the latest Zip specification[1], which only seem to be encumbered
>regarding encryption, there is one header ID which could be used for
>timestamp purposes (0x0020) but third party header IDs are allowed,
>which include a "commonly used" 0x5455 timestamp.
>
>[1] https://pkware.cachefly.net/webdocs/APPNOTE/APPNOTE-6.3.8.TXT