Hi Bernd-

Karaf is highly extensible— have you looked into implementing a feature 
deployer that performed the various integrity checks to your requirement?

-Matt

> On Nov 27, 2024, at 4:07 AM, Bernd <[email protected]> wrote:
> 
> Hello,
> 
> Quick question is there a karaf or OSGi component to have a 
> installation/feature.xml integrity protected (signed) without using jar 
> signing? It should be possible to fix a whole product configuration, like for 
> example signing a boot feature.xml which then contains only fixed versions 
> and checksums. Or is there a method in/for the obr?
> 
> Gruss
> Bernd
> 
> 
> --
> http://bernd.eckenfels.net

Reply via email to