[equinox-dev] verifying signed bundles

["Hampel, Michael" <michael.hampel@xxxxxxxxxxx>]

Hello,

 

I have a question regarding verifying the signed bundles at load time.

I start Equinox with:

-Dosgi.framework.keystore=file:/D:/config/keystore
-Dosgi.signedcontent.support=authority
-Dosgi.signature.support.verify=true

 

I have a signed bundle, which was signed with a different keystore and can start it without any problems.

I also removed classes from the bundle after signing it and it started with no problem.

Is Equinox verifying bundle signatures out of the box or do I have to do something in code?

 

Thanx in advance for any help,

 

Michael