REA inventory + decompile autofirma.jar with jadx

EduarD3V commented

2026-10-14 00:45:56 +02:00

Owner

Use REA skill workflow (agent skills: reverse-engineer-anything). Artifact: extracted/deb/usr/lib/Autofirma/autofirma.jar (fat jar, 21k entries, signed, 49MB).

Verify Fedora rpm JAR == deb JAR (sha256). rpm at original/Autofirma_Linux_Fedora.zip → rpm2cpio | cpio.
Inventory via REA tooling: MANIFEST.MF entry points, es.gob.afirma.* package map, bundled third-party libs from META-INF/maven.
Decompile: jadx -d decompiled/ extracted/deb/usr/lib/Autofirma/autofirma.jar and decompiled-configurador/ for autofirmaConfigurador.jar. decompiled/ is TRACKED in git.
Write docs/REVERSING-NOTES.md.

Read AGENTS.md first. NEVER commit original/ or extracted/ content. Refs #1.

Use REA skill workflow (agent skills: reverse-engineer-anything). Artifact: extracted/deb/usr/lib/Autofirma/autofirma.jar (fat jar, 21k entries, signed, 49MB). 1. Verify Fedora rpm JAR == deb JAR (sha256). rpm at original/Autofirma_Linux_Fedora.zip → rpm2cpio | cpio. 2. Inventory via REA tooling: MANIFEST.MF entry points, es.gob.afirma.* package map, bundled third-party libs from META-INF/maven. 3. Decompile: jadx -d decompiled/ extracted/deb/usr/lib/Autofirma/autofirma.jar and decompiled-configurador/ for autofirmaConfigurador.jar. decompiled/ is TRACKED in git. 4. Write docs/REVERSING-NOTES.md. Read AGENTS.md first. NEVER commit original/ or extracted/ content. Refs #1.

EduarD3V added the

bullet:queued

label

2026-10-14 00:45:56 +02:00

~~EduarD3V referenced this issue 2026-10-14 00:45:56 +02:00~~

Architecture doc: AutoFirma signing core (reference for web rewrite) #3

EduarD3V added

bullet:running

and removed

bullet:queued

labels

2026-10-14 00:46:57 +02:00

EduarD3V commented

2026-10-14 00:47:01 +02:00

Author

Owner

bullet: coder launched on branch issue/2-rea-inventory-decompile-autofi (model nan/deepseek-v4-flash).

bullet: coder launched on branch `issue/2-rea-inventory-decompile-autofi` (model `nan/deepseek-v4-flash`).

EduarD3V commented

2026-10-14 00:55:45 +02:00

Author

Owner

Decompile verified complete: 11,487 Java files under decompiled/sources/. Key packages present: es/gob/afirma/signers (cades, ooxml, odf, multi, batch), es/gob/afirma/keystores (112 files), es/gob/afirma/core (119 files). Bundled deps (iText fork aowagie, woodstox) also captured. Closing — output is work product for the rewrite reference.

EduarD3V closed this issue

2026-10-14 00:55:46 +02:00

EduarD3V referenced this issue from a commit

2026-10-14 01:12:54 +02:00

decompiled: jadx 1.5.6 output for autofirma.jar (11487 java files) (Refs #2)

EduarD3V referenced this issue from a commit

2026-10-14 01:12:54 +02:00

decompiled-configurador: jadx output for autofirmaConfigurador.jar (4811 java files) (Refs #2)

EduarD3V referenced this issue from a commit

2026-10-14 01:12:54 +02:00

docs: add REVERSING-NOTES.md for AutoFirma 1.9 Linux samples (Refs #2)

EduarD3V added