Ensure that the source jar entry is closed before reading
certificates and code signers from the entry.

gh-19041