Java Doc for CodeSource.java in  » 6.0-JDK-Modules » j2me » java » security » Java Source Code / Java DocumentationJava Source Code and Java Documentation

This class extends the concept of a codebase to encapsulate not only the location (URL) but also the certificate(s) that were used to verify signed code originating from that location.
version:
   1.28, 02/02/00
author:
   Li Gong
author:
   Roland Schemers

More specifically, this method makes the following checks, in order.

More specifically, this method makes the following checks, in order. If any fail, it returns false. If they all succeed, it returns true.

1. codesource must not be null.
2. If this object's certificates are not null, then all of this object's certificates must be present in codesource's certificates.
3. If this object's location (getLocation()) is not null, then the following checks are made against this object's location and codesource's:
   1. codesource's location must not be null.
   2. If this object's location equals codesource's location, then return true.
   3. This object's protocol (getLocation().getProtocol()) must be equal to codesource's protocol.
   4. If this object's host (getLocation().getHost()) is not null, then the SocketPermission constructed with this object's host must imply the SocketPermission constructed with codesource's host.
   5. If this object's port (getLocation().getPort()) is not equal to -1 (that is, if a port is specified), it must equal codesource's port.
   6. If this object's file (getLocation().getFile()) doesn't equal codesource's file, then the following checks are made: If this object's file ends with "/-", then codesource's file must start with this object's file (exclusive the trailing "-"). If this object's file ends with a "/*", then codesource's file must start with this object's file and must not have any further "/" separators. If this object's file doesn't end with a "/", then codesource's file must match this object's file with a '/' appended.
   7. If this object's reference (getLocation().getRef()) is not null, it must equal codesource's reference.

For example, the codesource objects with the following locations and null certificates all imply the codesource with the location "http://java.sun.com/classes/foo.jar" and null certificates:

 http:
 http://*.sun.com/classes/*
 http://java.sun.com/classes/-
 http://java.sun.com/classes/foo.jar