Latebinded assemblies: strongname verification

[Claus Konrad]

Hi

I am having a a plugin-framework, where I need to load assemblies (the
plugins') into my application. I want to verify that the assembly that I am
about to load, has indeed been signed with a keypair from my company.
Be advised that it is kind of "reverse" security demands I am dealing with
here; as I am not checking the Caller (this is my self), but the Callee (the
component/assembly).

This is ofcource to prevent malicious components from being loaded by my app
(and thereby crashing the entire system). I guess it must be a pretty often
seen scenario?

How can I verify the keypair of a loaded assembly?
Reflection does not seem to give much info on this topic?


/Claus

 

[Mattias Sjögren]

Claus,

System.Reflection.AssemblyName.GetAssemblyName(dllfile), then you can
use the GetPublicKey[Token] method on the returned AssemblyName
object.



Mattias

 

[Claus Konrad]

Thanks!
I suspected that it would be something simple...

/Claus