Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.

Bug 193587

Summary:

signature not valid with birt.report.engine jar on europa site

Product:

z_Archived

Reporter:

Kim Moir <kim.moir>

Component:

BIRT

Assignee:

Birt-Build <Birt-Build-inbox>

Status:

RESOLVED FIXED

QA Contact:

Severity:

major

Priority:

Flags:

wenfeng.fwd: pmc_approved+
bluesoldier: review? (wenfeng.fwd)
wyan: review? (bluesoldier)

Version:

unspecified

Target Milestone:

2.2.0 RC4

Hardware:

OS:

Windows XP

Whiteboard:

Bug Depends on:

Bug Blocks:

187396

Attachments:

Description	Flags
Product Configuration	none

Description Kim Moir

2007-06-20 13:48:02 EDT

See bug 192983 for further details.

Essentially, there is a class in the birt report engine jar submitted to Europa that has an invalid signature. This means when users select "Install" in update manager and are running a 1.5 vm or greater, Update manager will not verify the jar and fail to update this feature.

Andrew, on the platform's Core team  discovered that there are problems with the packed jars where there are class files at the root of the plugin and and nested jars. The signature on a single class was corrupt within this packed jar was corrupt.  When "Install" was selected in update manager, the signature didn't verify and the update of the feature failed.  

Yesterday, Andrew wrote a tool to verify the signatures of packed jars.  I have
run this tool against the entire Europa staging site and only one other plugin
exhibited this behaviour, (besides jdt.core which be fixed in bug 193570) 

Verifying org.eclipse.birt.report.engine_2.2.0.v20070531.jar:  STDOUT: jarsigner: java.lang.SecurityException: SHA1 digest error for org/eclipse/birt/report/engine/css/engine/value/AbstractColorManager.class

To avoid this problem, I would advise adding an eclipse.inf to the root of your 
org.eclipse.birt.report.engine plugin with the values jarprocessor.exclude.children=true 

See the attachment in bug 192983 for more information.

Comment 1 Xiaoying Gu

2007-06-20 23:28:48 EDT

Is this problem found in packed report.engine jar only? And is this found in Europa RC3?

I tried installing BIRT thru BIRT update site on 1.5 JVM, it work well.

birt.report.engine jar does have nested jar but does not have the class file in the root of plugin. Why it will be corrupt?

Comment 2 Xiaoying Gu

2007-06-21 00:21:05 EDT

I tried Europa RC3 update site and update site jars installs successfully either.

Attached is product configuration.

Comment 3 Xiaoying Gu

2007-06-21 00:22:51 EDT

Created attachment 71989 [details]
Product Configuration

Comment 4 Xiaoying Gu

2007-06-21 07:09:43 EDT

Set status to fixed.