[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [equinox-dev] Does equinox check the signature of flat plug-ins


Equinox will check the signatures of flat (or directory) bundles.  Inner jars are also validated if they are signed but the OSGi specification only allows permissions to be assigned based on the signatures of the base bundle file.  For flat (directory) bundles these is the signatures in the META-INF folder exploded on disk.

Notice that Equinox only checks signatures at runtime if osgi.support.signature.verify is set.

Tom



Pascal Rapicault <Pascal_Rapicault@xxxxxxxxxx>
Sent by: equinox-dev-bounces@xxxxxxxxxxx

04/19/2007 12:46 PM

Please respond to
Equinox development mailing list <equinox-dev@xxxxxxxxxxx>

To
equinox-dev@xxxxxxxxxxx
cc
Subject
[equinox-dev] Does equinox check the signature of flat plug-ins






When I look at an eclipse install, it appears that "flat" bundles contain
signature files in their META-INF folder (See for example the junit
plugin).
My question is, will equinox use those files to verify the validity of a
bundle, or will it only check the validity of the inner jar.

Thx

PaScaL

_______________________________________________
equinox-dev mailing list
equinox-dev@xxxxxxxxxxx
https://dev.eclipse.org/mailman/listinfo/equinox-dev