[equinox-dev] a java tool for signing OSGi bundles

[Pierre Parrend <pierre.parrend@xxxxxxxxxxxx>]

 Hello,

 as is said on the Equinox Security web page, the only tool that is currently
available for signing OSGi bundles is the command line 'jarsigner'
(http://www.eclipse.org/equinox/incubator/security/Signing.html). The INRIA has
just released a convenient GUI-based (and bundelized) tool, 'SF-Jarsigner', that
can be used with any of the open source OSGi implementations (and most probably
other, but we did not test them).

 The SF-Jarsigner has two main features:
- sign and verifies bundles (according to the OSGi specs, not the less strict
jar specs)
- publish bundles into a bundle repository (OBR2 is the current supported
format, but it could well be extended to support Eclipse plugins)

 it is published under the Cecill License, which is a french-law license
compatible with the GPL.

 you will find the code (in a beta version), and necessary documentation at the
following address:

http://sf-jarsigner.gforge.inria.fr/

to have a look at the tool:
http://sf-jarsigner.gforge.inria.fr/example.html



 Pierre Parrend

-- 
Pierre Parrend
Ph.D. Student, Teaching Assistant
INRIA-INSA Lyon, France
pierre.parrend@insa-lyon
web : www.rzo.free.fr