Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [equinox-dev] Best way to contribute values (eg PGP keys) with OSGi?

I don't get exactly how this is supposed to work.

If I trust a bundle it should automatically lead to trusting others as well? Shouldn't this work through a key that contains trust info for other keys like described here: [1]

I think this all is already covered by the concept of key-servers so why don't we leverage these?

Anyways if we just want to reinvent the wheel once again, a service won't suffice I think as it requires a bundle to be in STARTING/STARTED state and seems a way to oversized here.

If we just want a bundle to carry a public PGP key (with possible signed content by others) I would simply use convention over configuration and place a public.pgp in the root of the bundle as such bundle entries could be accessed even in installed state.


Am 01.12.21 um 16:42 schrieb Mickael Istria:
Hi all,

In the context of <> , we need a way for bundles (that were preliminary approved by user) to be capable of contributing some PGP public keys as being "trusted by default". I'm wondering what would be the best way to contribute such extensibility in p2. p2 doesn't define extension points, but uses OSGi Services; but here we only want to contribute a value (that could be the armoured keys, or a path to a resource in the bundle containing such keys...). As far as I am aware -ie not much-, I see 3 possible approaches:

1. Define a service interface and let bundles contribute extensions to this interface, eg via OSGI-INF/component.xml
   * Requires to create 1 service/API interace
  * Would consuming the service from a bundle automatically trigger bundle activation? That would be undesired.

2. Add support for a custom MANIFEST header, something like `Eclipse-P2-PGP-TrustedKey`.
   * Seems a bit alien, would require some support in tools

Are there other solutions you think could fit? What should be preferred?

Thanks in advance
Mickael Istria
Eclipse IDE <> developer, for Red Hat Developers <>

equinox-dev mailing list
To unsubscribe from this list, visit

Back to the top