Hi Daniel,

Your post is a good news for me.

Actually, the dex jar files that were signed is so strange for me.

Currently, when DexFile wants to load a class of them (i.e. the dex
jar file), they define this class with a null ProtectionDomain
parameter. A way to fulfill the security for the dex jar file is
change this parameter to a valid ProtectionDomain object. However, I
can not really create a that object because the CodeSource object was
impossible to created by the JarVerifier is not successful. More
clearly in source code as here:
...
JarFile jf = new JarFile(path, true);
JarEntry je = jf.getJarEntry("classes.dex");
CodeSource cs = new CodeSource(url, je.getCertificates()); //<--- at
this line, je.getCertificates() return null, so the creation failed.
...

For normal jar file (i.e they have class files, not dex file), the
creation is OK.

Could you explain why it fails to get certificates?

Thank you so much.

On Feb 5, 2:44 am, Daniel Janev <d.ja...@prosyst.com> wrote:
>         Hi Guys,
>
> I've just succeeded in changing thesecuritymodel of the dalvik VM! So
> I've run an OSGi implementation on the android platform withsecurity.
> Of course it does not work without some "hacks" for file access and so
> on. But mainly thejavasecuritymodel works good enough. If anyone is
> interested in this I can share with you what have to be done.
>
> P.S. So, it seems that I was the first in the world to run it :)
>
> --
>
> Best Regards,
>     Daniel
> ---------------------------------------------------------------
> Daniel Janev · Department Manager/Core Platform and Smart Home
> ProSyst Software GmbH
> 1606 Sofia, Bulgaria · Vladajska Str. 48
> Tel. +359 (0)2 952 35 81/109 · Fax +359 (0)2 953 26 17
> Mobile Phone +359 (0)888 678 670http://www.prosyst.com· d.ja...@prosyst.com
> ---------------------------------------------------------------
> stay in touch with your product.
> ---------------------------------------------------------------

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers-unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to