Re: [equinox-dev] Using the org.eclipse.osgi.jar.verifier

[Benjamin Reed <breed@xxxxxxxxxxxxxxx>]

If the CA or some element of the certificate chain is not present in the 
keystore, the signature for that certificate chain will be ignored. So, it 
should install and run okay, but it may not get permissions that it needs if 
those permissions are assigned based on signer.

As far as the second problem, my guess would be that the Digest of the image 
does not match the digest in the Manifest. Unfortunately, the Java classes 
seem to manifest mismatched digests as other exceptions.

ben

On Sunday 16 October 2005 05:05 pm, habeck@xxxxxxxxxx wrote:
> Hi,
>
> I built and installed the org.eclipse.osgi.jarverifier_1.0.0.jar plug-in.  
>  
>
> Below are some initial test results:
>
> If a plug-in is signed, but the CA is not present in the keystore, an
> exception is thrown.  However, the plug-in still seems to be installed OK.
>   However, regardless of the presence of a recognized CA, when running with
> the verifier enabled, the following error is thrown when creating images
> from  .gif files:
>
> Caused by: org.eclipse.swt.SWTException: Unsupported or unrecognized format
> at org.eclipse.swt.SWT.error(SWT.java:2942)
> at org.eclipse.swt.SWT.error(SWT.java:2865)
> at org.eclipse.swt.SWT.error(SWT.java:2836)
> at org.eclipse.swt.internal.image.FileFormat.load(FileFormat.java:73)
> at org.eclipse.swt.graphics.ImageLoader.load(ImageLoader.java:126)
> at org.eclipse.swt.graphics.ImageDataLoader.load(ImageDataLoader.java:18)
> at org.eclipse.swt.graphics.ImageData.<init>(ImageData.java:327)
> at
> org.eclipse.jface.resource.URLImageDescriptor.getImageData(URLImageDescript
>or.java:57) at
> org.eclipse.jface.resource.ImageDescriptor.createImage(ImageDescriptor.java
>:279) at
> org.eclipse.jface.resource.ImageDescriptor.createImage(ImageDescriptor.java
>:233) at
> org.eclipse.jface.resource.ImageDescriptor.createImage(ImageDescriptor.java
>:211) at
> com.ibm.security.jarinspector.views.InspectionView.<clinit>(InspectionView.
>java:81)
>
> The same plug-in runs fine without the verifier enabled.
>
> Any idea why the .gif  file can not be loaded with the verifier enabled?
>
>
> - Ted