[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
[equinox-dev] a java tool for signing OSGi bundles


 as is said on the Equinox Security web page, the only tool that is currently
available for signing OSGi bundles is the command line 'jarsigner'
(http://www.eclipse.org/equinox/incubator/security/Signing.html). The INRIA has
just released a convenient GUI-based (and bundelized) tool, 'SF-Jarsigner', that
can be used with any of the open source OSGi implementations (and most probably
other, but we did not test them).

 The SF-Jarsigner has two main features:
- sign and verifies bundles (according to the OSGi specs, not the less strict
jar specs)
- publish bundles into a bundle repository (OBR2 is the current supported
format, but it could well be extended to support Eclipse plugins)

 it is published under the Cecill License, which is a french-law license
compatible with the GPL.

 you will find the code (in a beta version), and necessary documentation at the
following address:


to have a look at the tool:

 Pierre Parrend

Pierre Parrend
Ph.D. Student, Teaching Assistant
INRIA-INSA Lyon, France
web : www.rzo.free.fr