Re: [equinox-dev] TrustEngine and other security services

[John Arthorne <John_Arthorne@xxxxxxxxxx>]

p2 uses the TrustEngine to persist newly
trusted certificates after prompting the user. See org.eclipse.equinox.internal.p2.engine.phases.CertificateChecker.

http://git.eclipse.org/c/equinox/rt.equinox.p2.git/tree/bundles/org.eclipse.equinox.p2.engine/src/org/eclipse/equinox/internal/p2/engine/phases/CertificateChecker.java

John



From:      
 Thomas Watson <tjwatson@xxxxxxxxxx>
To:      
 Equinox development
mailing list <equinox-dev@xxxxxxxxxxx>, 
Date:      
 01/02/2013 09:28 AM
Subject:    
   Re: [equinox-dev]
TrustEngine and other security services
Sent by:    
   equinox-dev-bounces@xxxxxxxxxxx

---

The TrustEngine is largely used as an
implementation detail behind the org.eclipse.osgi.signedcontent package.
 OSGi services published with using the org.eclipse.osgi.service.security.TrustEngine
interface are used to determine the authenticity of a certificate chain
used to sign content (jars, bundles etc.).  I did not remember p2
using the TrustEngine directly, but perhaps it does for authenticating
other types of certificates.

Sorry, other than the javadoc published for the packages there is not a
lot of documentation here.

Tom

Pascal
Rapicault ---12/29/2012 03:51:46 AM---The p2 engine makes use of the TrustEngine,
however I don't remember the details of how it works. Yo

From: Pascal Rapicault <pascal@xxxxxxxxxxxxx>
To: Equinox development mailing list
<equinox-dev@xxxxxxxxxxx>, 
Date: 12/29/2012 03:51 AM
Subject: Re: [equinox-dev] TrustEngine
and other security services
Sent by: equinox-dev-bounces@xxxxxxxxxxx

---

The p2 engine makes use of the TrustEngine, however I don't remember the
details of how it works.
You may also want to poke around at other parts of p2 as I just happen
to remember about this ref in the engine, but there may be others.

HTH

Pascal

On 2012-12-29, at 5:47 AM, Scott Lewis wrote:

> Hello,
> 
> Is there documentation on Equinox security services like org.eclipse.osgi.service.security.TrustEngine
service...and implementation?  I looked in the Equinox Security area
[1], but didn't find a lot of service/API docs.   Is/are there examples
of using the TrustEngine service(s)?
> 
> Thanks,
> 
> Scott
> 
> 
> 
> _______________________________________________
> equinox-dev mailing list
> equinox-dev@xxxxxxxxxxx
> https://dev.eclipse.org/mailman/listinfo/equinox-dev

_______________________________________________
equinox-dev mailing list
equinox-dev@xxxxxxxxxxx
https://dev.eclipse.org/mailman/listinfo/equinox-dev

_______________________________________________
equinox-dev mailing list
equinox-dev@xxxxxxxxxxx
https://dev.eclipse.org/mailman/listinfo/equinox-dev