Hi all,

we have a customer requirement to only allow signed bundles in the
framework.

I have read that this should be possible:
-
http://help.eclipse.org/juno/index.jsp?topic=%2Forg.eclipse.platform.doc.isv%2Fguide%2Fbundle_security.html
- http://felix.apache.org/site/apache-felix-framework-security.html

I am struggling though how to set it up so it actually checks signatures
and denies non trusted or missing signatures.

Has anyone here already tried this?

If the framework does not allow it via configuration. Is there a hook in
OSGi where I can be called when a bundle is loaded?

Christian

Reply via email to