[equinox-dev] Signed bundles

[Marcel Offermans <marcel.offermans@xxxxxxxxxx>]

After succeeding in getting Equinox to run with security on, I'm now  
experimenting with signed bundles. First I made a new keystore, using  
the standard java "keytool", like this:

keytool -genkey -alias myalias -keystore keystore

I created a bundle using Eclipse's PDE, and used the "Export" function  
to create a signed bundle, pointing to my freshly created keystore,  
specifying the alias and password.

Now my question is, how do I configure equinox to use my keystore? I  
want to use it in combination with PermissionAdmin and an  
AdminPermission that filters on the signer (using a condition like  
"(signer=\*, o=mycompany)"). All I can find is documentation on how to  
use the jarverifier (http://dev.eclipse.org/viewcvs/indextech.cgi/equinox-home/security/verifier.html 
) which states I can use a "osgi.framework.keystore" property to point  
to my store. What I don't know is:
 a) do I need this jarverifier at all? I am assuming that just  
starting equinox with security should be enough;
 b) is that property also applicable if you're not using the  
jarverifier?
 c) how do I specify alias and password for the store?

Any pointers to information about this would be nice too! :)

Greetings, Marcel