Latebinded assemblies: strongname verification

From: Claus Konrad (claus_at_whoknows.it)
Date: 04/20/04 

Date: Tue, 20 Apr 2004 16:14:32 +0200

Hi

I am having a a plugin-framework, where I need to load assemblies (the
plugins') into my application. I want to verify that the assembly that I am
about to load, has indeed been signed with a keypair from my company.
Be advised that it is kind of "reverse" security demands I am dealing with
here; as I am not checking the Caller (this is my self), but the Callee (the
component/assembly).

This is ofcource to prevent malicious components from being loaded by my app
(and thereby crashing the entire system). I guess it must be a pretty often
seen scenario?

How can I verify the keypair of a loaded assembly?
Reflection does not seem to give much info on this topic?

/Claus

Relevant Pages

  • Latebinded assemblies: strongname verification
    ... I am having a a plugin-framework, where I need to load assemblies (the ... How can I verify the keypair of a loaded assembly? ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Which referenes being used?
    ... >>> code to load assemblies that aren't used in the code. ... >> included in your project settings (used by the compiler) but aren't ... Appreciate any references you can ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Forms authentication and Assembly.LoadFrom
    ... I am trying to load assemblies from a ASP.NET application using ... I programmed a set of functions in the web service to compare the versions of the dll stored on the server and the dll stored locally and download the assemblies if necessary. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: assembly verification
    ... A strong name is used by the CLR to verify that an assembly's contents match ... those at the time of its signing. ... As for the assemblies that are being loaded, ... > The application will operate in a rather wild environment, ...
    (microsoft.public.dotnet.security)
  • Re: Detect if assembly exists
    ... Now I only need to know the assemblies which the CLR would load in the ... filesystem (not the GAC). ... I think I can determine the directory which the CLR ... Could someone verify ...
    (microsoft.public.dotnet.framework.clr)
Quantcast