Equinox will check the signatures of
flat (or directory) bundles. Inner jars are also validated if they
are signed but the OSGi specification only allows permissions to be assigned
based on the signatures of the base bundle file. For flat (directory)
bundles these is the signatures in the META-INF folder exploded on disk.
Notice that Equinox only checks signatures
at runtime if osgi.support.signature.verify is set.
Pascal Rapicault <Pascal_Rapicault@xxxxxxxxxx> Sent by: equinox-dev-bounces@xxxxxxxxxxx
04/19/2007 12:46 PM
Please respond to
Equinox development mailing list <equinox-dev@xxxxxxxxxxx>
[equinox-dev] Does equinox check the
signature of flat plug-ins
When I look at an eclipse install, it appears that "flat" bundles
signature files in their META-INF folder (See for example the junit
My question is, will equinox use those files to verify the validity of
bundle, or will it only check the validity of the inner jar.
equinox-dev mailing list