[FELIX-3610] Bundle signatures should be checked when the framework is restarted

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: framework-4.0.3
• Component/s: Framework, Framework Security
• Assignee: Karl Pauls
• Reporter: Guillaume Nodet
• Created: 25/Jul/12 16:43
• Updated: 27/Jul/12 09:27
• Resolved: 27/Jul/12 09:27

Description

Signed bundles are only checked when installed, but the goal of signed bundles is to make sure no one has changed the jar. This is not ensured unless bundle entries are verified when loaded.