Re: [equinox-dev] Does equinox check the signature of flat plug-ins

[Thomas Watson <tjwatson@xxxxxxxxxx>]

Equinox will check the signatures of
flat (or directory) bundles.  Inner jars are also validated if they
are signed but the OSGi specification only allows permissions to be assigned
based on the signatures of the base bundle file.  For flat (directory)
bundles these is the signatures in the META-INF folder exploded on disk.

Notice that Equinox only checks signatures
at runtime if osgi.support.signature.verify is set.

Tom

Pascal Rapicault <Pascal_Rapicault@xxxxxxxxxx>
Sent by: equinox-dev-bounces@xxxxxxxxxxx

04/19/2007 12:46 PM

Please respond to
Equinox development mailing list <equinox-dev@xxxxxxxxxxx>

To	equinox-dev@xxxxxxxxxxx
cc
Subject	[equinox-dev] Does equinox check the signature of flat plug-ins

When I look at an eclipse install, it appears that "flat" bundles
contain
signature files in their META-INF folder (See for example the junit
plugin).
My question is, will equinox use those files to verify the validity of
a
bundle, or will it only check the validity of the inner jar.

Thx

PaScaL

_______________________________________________
equinox-dev mailing list
equinox-dev@xxxxxxxxxxx
https://dev.eclipse.org/mailman/listinfo/equinox-dev