On 10/07/2010 10:23 AM, Sim IJskes - QCG wrote:
Some bad news here, i'm afraid. I did a quick inventory of the classes
passed through a TrustVerfifier, and it turns out that if you deploy via
webstart with signed jars, the classloader does not fill in the
CodeSource of the ProtectionDomain. I'm not sure what this means for
Ignore this.
All the classes that were seen during webstart deployment, where true
proxies [Proxy.isProxy(obj) == true].
Started from the commandline classes like
net.jini.jeri.BasicObjectEndpoint, net.jini.jeri.tcp.TcpEndpoint were
also passed through the TrustVerifier.
Gr. Sim