How to extends the the class java.security.SecureClassLoader?

Question

I want write my own ClassLoader. It should be faster and more dynamic as the default ClassLoader for Applets.

But I does not know how I should implements the method:

PermissionCollection getPermissions( CodeSource codesource )

The super implementation grant no rights also if there is a valid certificate in the CodeSource.

Must I verify the certificate self or is it already verifies form the Java VM and accepted from the User?

Answer 1

The Sun PlugIn and WebStart override getPermissions to check the signature and check with the user whether they wish to accept the certificate. This is an implementation detail and may change in the future.

Answer 2

Correct me if I am wrong - I think what you want is to create a classloader somewhere in the initialization of your applet and then load your subsequent classes using that loader. If yes, the applet will already have been granted all permissions by virtue of it being signed (and provided the user clicked on the browser warning). Your getPermissions method can look like this

    PermissionCollection p = new Permissions();
    p.add(new AllPermission());
    return p;