Java – How to extends the class java.security.SecureClassLoader

classloaderjavasecurity

I want write my own ClassLoader. It should be faster and more dynamic as the default ClassLoader for Applets.

But I does not know how I should implements the method:

PermissionCollection getPermissions( CodeSource codesource )

The super implementation grant no rights also if there is a valid certificate in the CodeSource.

Must I verify the certificate self or is it already verifies form the Java VM and accepted from the User?

Best Solution

The Sun PlugIn and WebStart override getPermissions to check the signature and check with the user whether they wish to accept the certificate. This is an implementation detail and may change in the future.