configure bundle signing to use JDK6-default sha1