Ensure that the source jar entry is closed before reading certificates and code signers from the entry. gh-19041