Mikhail Loenko wrote:
> 2007/6/26, Tim Ellison <[EMAIL PROTECTED]>:
>> Yes, I seem to recall this discussion from a long time ago when we were
>> trying to get BouncyCastle to work with Harmony code.  Ideally we would
>> 'own' some trusted algorithms in the bootclasspath that allow us to open
>> and check signed JARs.
> 
> We have this already. Our small
> org.apache.harmony.security.provider.crypto.CryptoProvider
> verifies signature of JARs

Ah, thanks -- I'd forgotten that.

Tim

Reply via email to