[Mono-bugs] [Bug 53548][Wis] Changed - mono runtime doesn't provide any evidence when loading an assembly

bugzilla-daemon@bugzilla.ximian.com bugzilla-daemon@bugzilla.ximian.com
Thu, 29 Jan 2004 12:33:29 -0500 (EST)


Please do not reply to this email- if you want to comment on the bug, go to the
URL shown below and enter your comments there.

Changed by spouliot@videotron.ca.

http://bugzilla.ximian.com/show_bug.cgi?id=53548

--- shadow/53548	2004-01-29 12:21:44.000000000 -0500
+++ shadow/53548.tmp.8036	2004-01-29 12:33:29.000000000 -0500
@@ -2,22 +2,23 @@
 Product: Mono/Runtime
 Version: unspecified
 OS: All
 OS Details: 
 Status: NEW   
 Resolution: 
-Severity: 
+Severity: Unknown
 Priority: Wishlist
 Component: misc
 AssignedTo: mono-bugs@ximian.com                            
 ReportedBy: spouliot@videotron.ca               
 QAContact: mono-bugs@ximian.com
 TargetMilestone: ---
 URL: 
 Cc: 
 Summary: mono runtime doesn't provide any evidence when loading an assembly
+OtherBugsDependingOnThis: 52606
 
 Description of Problem:
 Mono runtime doesn't provide any evidence when loading an assembly. This is
 a pre-required step to implement CAS (and is used in some other places).
 
 
@@ -45,6 +46,26 @@
 empty evidence (not null).
 
 ------- Additional Comments From spouliot@videotron.ca  2004-01-29 12:21 -------
 Created an attachment (id=6553)
 DisplayEvidence.cs
 
+
+------- Additional Comments From spouliot@videotron.ca  2004-01-29 12:33 -------
+By default the MS runtime includes 3 evidences
+- Zone
+- Url
+- Hash
+
+if the Url doesn't start with file:// (e.g. http://) then a Site
+evidence is also added.
+
+if the assembly is strongnamed then a StrongName evidence is added.
+*** note : this doesn't mean the strongname has been verified. IIRC
+assembly in the GAC are never verified (well they are verified during
+installation into the GAC not afterward).
+
+if the assembly is signed using Authenticode then a Publisher evidence
+is added.
+
+see attached code (DefaultEvidences.cs) on how to produce the
+evidences in managed code (all except StrongName).