ant-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Peter Donald <pe...@apache.org>
Subject Re: Ant Security
Date Wed, 10 Jul 2002 23:44:10 GMT
The unhderlying network protocol could be used I believe (which largely 
consists of transferring versioned products). There is even an opensource 
implementation on sourceforge. I have no idea on the higher level 
descriptors etc

At 05:13 PM 7/10/2002 -0400, you wrote:
>Is there some way that the jnlp/webstart mechanisms could be leveraged?
>They build in security and won't accept unsigned jars. (The user may
>accept jars with unverified signatures, but that is the user's problem).
>I don't even know if this is possible, and particularly in light of the
>need to run ant in headless environments, but I havn't looked at web
>start more than copying their demo jnlp file, edit and make it run
>something.
>
>Clearly, use of this mechanism would need to be optional as it depends
>on the other projects supplying signed jars and jnlp files, but would
>allow projects that wanted to sign their ant.jar files to do so easily.
>
>That is if it can be used this way, which it may not. I am only
>speculating.
>
>Gus
>
>Peter Donald wrote:
> >
> > On Wed, 10 Jul 2002 20:09, Stephane Bailliez wrote:
> > > > -----Original Message-----
> > > > From: Peter Donald [mailto:peter@apache.org]
> > > >
> > > > Java does not even have any decent notion of libraries let
> > > > alone a decent
> > > > dependency or ld.so system.
> > >
> > > Exactly, so that's no negligible work...
> > > Is there any JSR that actually work on this ?
> >
> > Not really. There is some interest from technical people at Sun but little
> > interest from management from what I hear. My translation from their 
> salesman
> > pitch basically was that it was too costly a venture, difficult to get
> > through the JCP and too likely to allow other groups/vendors to get more
> > control over JRE environment/implementation. However the guy I was 
> talking to
> > was not high up so take that with a grain of salt ;)
> >
> > --
> > Cheers,
> >
> > Peter Donald
> > ----------------------------------------
> > "Liberty means responsibility. That is
> >       why most men dread it." - Locke
> > ----------------------------------------
> >
> > --
> > To unsubscribe, e-mail:   <mailto:ant-dev-unsubscribe@jakarta.apache.org>
> > For additional commands, e-mail: <mailto:ant-dev-help@jakarta.apache.org>
>
>--
>To unsubscribe, e-mail:   <mailto:ant-dev-unsubscribe@jakarta.apache.org>
>For additional commands, e-mail: <mailto:ant-dev-help@jakarta.apache.org>


--
To unsubscribe, e-mail:   <mailto:ant-dev-unsubscribe@jakarta.apache.org>
For additional commands, e-mail: <mailto:ant-dev-help@jakarta.apache.org>


Mime
View raw message