Irfan Basha [https://community.jboss.org/people/irbash] created the discussion "Re: Custom ClassLoader" To view the discussion, visit: https://community.jboss.org/message/804978#804978 -------------------------------------------------------------- The translator is different from classloader: If I use translator, I pass the encrypted bytecode to the translator and the translator decrypts it and sends back the actual bytecode. So once the translator decrypts it, the actual bytecode can be obtained easily. If anyone wants to get the actual bytecode, he/she can just get it from translator. If I use classloader (provided by the third party security company, which decrypts the bytecode only if a hardware dongle is available), I just pass the classname to the ClassLoader and it returns me the Class after loading it. So with the Class, one cannot get the bytecode (at least thats what I believe). This secure ClassLoader somehow loads the class without calling the java.lang.ClassLoader, and the classloader itself is encrypted so it is pretty much safe. (I tested this by changing the code of java.lang.ClassLoader in rt.jar... surprisingly this secure classloader doesn't call the java.lang.ClassLoader... ) -------------------------------------------------------------- Reply to this message by going to Community [https://community.jboss.org/message/804978#804978] Start a new discussion in JBoss Microcontainer at Community [https://community.jboss.org/choose-container!input.jspa?contentType=1&...]

Irfan Basha [https://community.jboss.org/people/irbash] created the discussion "Re: Custom ClassLoader" To view the discussion, visit: https://community.jboss.org/message/805992#805992 -------------------------------------------------------------- Well, I must agree that I have just about 2 years of experience in java programming... and as far as my knowledge is, for java to execute a class it should first load it in memory (in jvm) and this can be done by ClassLoader. Hence any class which should be loaded should have gone through loadClass method of ClassLoader. (I suppose this also applies for classes loaded through reflection) And the strange thing is, when I modified the code of java.lang.ClassLoader and dumped the bytecode to my local disk (from method loadClass), I didnot find the classes which are loaded through the secure classloader. Is there a way to load class into jvm from any other way without using java.lang.ClassLoader ? -------------------------------------------------------------- Reply to this message by going to Community [https://community.jboss.org/message/805992#805992] Start a new discussion in JBoss Microcontainer at Community [https://community.jboss.org/choose-container!input.jspa?contentType=1&...]

Irfan Basha [https://community.jboss.org/people/irbash] created the discussion "Re: Custom ClassLoader" To view the discussion, visit: https://community.jboss.org/message/805996#805996 -------------------------------------------------------------- Anyway, Is there a way to extend the org.jboss.classloader.spi.base.BaseClassLoader ? -------------------------------------------------------------- Reply to this message by going to Community [https://community.jboss.org/message/805996#805996] Start a new discussion in JBoss Microcontainer at Community [https://community.jboss.org/choose-container!input.jspa?contentType=1&...]

Irfan Basha [https://community.jboss.org/people/irbash] created the discussion "Re: Custom ClassLoader" To view the discussion, visit: https://community.jboss.org/message/806009#806009 -------------------------------------------------------------- another question... in Tomcat you can add –Djava.system.class.loader=com.xxx.xxxClassLoader to catalina.bat to state that the system classloader is xxxClassLoader. Can this be achieved by adding set "JAVA_OPTS=%JAVA_OPTS% -Djava.system.class.loader=com.xxx.xxxClassLoader" in run.bat ? -------------------------------------------------------------- Reply to this message by going to Community [https://community.jboss.org/message/806009#806009] Start a new discussion in JBoss Microcontainer at Community [https://community.jboss.org/choose-container!input.jspa?contentType=1&...]