Discussion:
Difference between BasicProxyPreparer and VerifyingProxyPreparer?
Esmond Pitt
2009-03-30 09:31:50 UTC
Permalink
Subject says it all really. I've read the Javadoc and even the source code
and I can see that they are doing slightly different things, but what? and
for what purpose? when would I use one rather than the other?

TIA

EJP

--------------------------------------------------------------------------
Getting Started: http://www.jini.org/wiki/Category:Getting_Started
Community Web Site: http://jini.org
jini-users Archive: http://archives.java.sun.com/archives/jini-users.html
Unsubscribing: email "signoff JINI-USERS" to ***@java.sun.com
Peter Jones
2009-03-30 21:49:24 UTC
Permalink
Post by Esmond Pitt
Subject says it all really. I've read the Javadoc and even the
source code and I can see that they are doing slightly different
things, but what? and for what purpose? when would I use one rather
than the other?
There was some discussion in this thread:

http://archives.java.sun.com/cgi-bin/wa?A2=ind0702&L=JINI-USERS&P=7651
http://archives.java.sun.com/cgi-bin/wa?A2=ind0702&L=JINI-USERS&P=8722
...

The primary motivation was to facilitate specifying, in a
configuration file, arbitrary context elements, like a
BasicUntrustedObjectSecurityContext, to use for the
Security.verifyObjectTrust invocation (whereas BasicProxyPreparer
always uses the specified constraints as the sole context element).

-- Peter

--------------------------------------------------------------------------
Getting Started: http://www.jini.org/wiki/Category:Getting_Started
Community Web Site: http://jini.org
jini-users Archive: http://archives.java.sun.com/archives/jini-users.html
Unsubscribing: email "signoff JINI-USERS" to ***@java.sun.com
Esmond Pitt
2009-03-30 23:11:00 UTC
Permalink
Thanks Peter
Post by Peter Jones
context elements
Is there a proper definition of that somewhere other than 'determined by its
type'?

TIA

EJP

--------------------------------------------------------------------------
Getting Started: http://www.jini.org/wiki/Category:Getting_Started
Community Web Site: http://jini.org
jini-users Archive: http://archives.java.sun.com/archives/jini-users.html
Unsubscribing: email "signoff JINI-USERS" to ***@java.sun.com
Peter Jones
2009-03-31 19:38:06 UTC
Permalink
Post by Esmond Pitt
Post by Peter Jones
context elements
Is there a proper definition of that somewhere other than
'determined by its type'?
The classes that implement TrustVerifier specify how they use those
context elements, if at all. If I recall correctly, of the trust
verifier classes in the starter kit, only ProxyTrustVerifier uses
them: both for the constraints for the ProxyTrust.getProxyVerifier
remote invocation on the bootstrap proxy (must be specified), and the
UntrustedObjectSecurityContext for invoking methods on not-yet-trusted
classes (optional, defaults to a very restrictive security context).

-- Peter

--------------------------------------------------------------------------
Getting Started: http://www.jini.org/wiki/Category:Getting_Started
Community Web Site: http://jini.org
jini-users Archive: http://archives.java.sun.com/archives/jini-users.html
Unsubscribing: email "signoff JINI-USERS" to ***@java.sun.com
Loading...