Return-Path: X-Original-To: apmail-felix-dev-archive@www.apache.org Delivered-To: apmail-felix-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 336B3D863 for ; Thu, 26 Jul 2012 19:59:36 +0000 (UTC) Received: (qmail 52843 invoked by uid 500); 26 Jul 2012 19:59:35 -0000 Delivered-To: apmail-felix-dev-archive@felix.apache.org Received: (qmail 52734 invoked by uid 500); 26 Jul 2012 19:59:35 -0000 Mailing-List: contact dev-help@felix.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@felix.apache.org Delivered-To: mailing list dev@felix.apache.org Received: (qmail 52461 invoked by uid 99); 26 Jul 2012 19:59:35 -0000 Received: from issues-vm.apache.org (HELO issues-vm) (140.211.11.160) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 26 Jul 2012 19:59:35 +0000 Received: from isssues-vm.apache.org (localhost [127.0.0.1]) by issues-vm (Postfix) with ESMTP id 09ED2142855 for ; Thu, 26 Jul 2012 19:59:35 +0000 (UTC) Date: Thu, 26 Jul 2012 19:59:35 +0000 (UTC) From: "Guillaume Nodet (JIRA)" To: dev@felix.apache.org Message-ID: <700170484.107692.1343332775042.JavaMail.jiratomcat@issues-vm> In-Reply-To: <1617987772.101836.1343234734945.JavaMail.jiratomcat@issues-vm> Subject: [jira] [Updated] (FELIX-3610) Bundle signatures should be checked when the framework is restarted MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/FELIX-3610?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Guillaume Nodet updated FELIX-3610: ----------------------------------- Fix Version/s: framework-4.0.3 Summary: Bundle signatures should be checked when the framework is restarted (was: Support runtime verification for signed bundles) > Bundle signatures should be checked when the framework is restarted > ------------------------------------------------------------------- > > Key: FELIX-3610 > URL: https://issues.apache.org/jira/browse/FELIX-3610 > Project: Felix > Issue Type: Improvement > Components: Framework, Framework Security > Reporter: Guillaume Nodet > Assignee: Karl Pauls > Fix For: framework-4.0.3 > > > Signed bundles are only checked when installed, but the goal of signed bundles is to make sure no one has changed the jar. This is not ensured unless bundle entries are verified when loaded. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira