[
Date Prev][
Date Next][
Thread Prev][
Thread Next][
Date Index][
Thread Index]
[
List Home]
[equinox-dev] a java tool for signing OSGi bundles
|
Hello,
as is said on the Equinox Security web page, the only tool that is currently
available for signing OSGi bundles is the command line 'jarsigner'
(http://www.eclipse.org/equinox/incubator/security/Signing.html). The INRIA has
just released a convenient GUI-based (and bundelized) tool, 'SF-Jarsigner', that
can be used with any of the open source OSGi implementations (and most probably
other, but we did not test them).
The SF-Jarsigner has two main features:
- sign and verifies bundles (according to the OSGi specs, not the less strict
jar specs)
- publish bundles into a bundle repository (OBR2 is the current supported
format, but it could well be extended to support Eclipse plugins)
it is published under the Cecill License, which is a french-law license
compatible with the GPL.
you will find the code (in a beta version), and necessary documentation at the
following address:
http://sf-jarsigner.gforge.inria.fr/
to have a look at the tool:
http://sf-jarsigner.gforge.inria.fr/example.html
Pierre Parrend
--
Pierre Parrend
Ph.D. Student, Teaching Assistant
INRIA-INSA Lyon, France
pierre.parrend@insa-lyon
web : www.rzo.free.fr