Bugzilla – Full Text Bug Listing
| Summary: | Problem with signed JARs for GWT runtime platform | ||
|---|---|---|---|
| Product: | [Modeling] EMF | Reporter: | Kenn Hussey <Kenn.Hussey> |
| Component: | Releng | Assignee: | Michal Ruzicka <michal.ruza> |
| Status: | RESOLVED WONTFIX | QA Contact: | |
| Severity: | major | ||
| Priority: | P3 | CC: | eclipse-bugs, Ed.Merks, thomas |
| Version: | 2.7.0 | ||
| Target Milestone: | --- | ||
| Hardware: | PC | ||
| OS: | Mac OS X - Carbon (unsup.) | ||
| Whiteboard: | |||
|
Description
Kenn Hussey
Michal, is it possible to disable signing for just the GWT bundles? Would it be possible for us to try a build with signing disabled to see if that addresses the problem? The eclipse signer (and buckminster) will honor the options described here: http://wiki.eclipse.org/JarProcessor_Options so this should just be a matter of adding an eclipse.inf file. It would be interesting to know why the check fails though. Is the file incorrectly signed somehow (in which case it should be addressed by the Eclipse signer)? Or is this a bug in GAE (should be reported to Google)? Disabling signing for the GWT JARs as per Thomas' comment did indeed eliminate the problem. I'm not sure who's at "fault" here. I did a Google search for this kind of problem in the GWT / App Engine context, but came up empty. We can follow up with the GWT developer forum (Ed, could you do that?), but I'm not going to hold my breath for a response. In the meantime, we can keep the signing disabled so that at least we can successfully deploy. There is a downside to not having EMF GWT bundles signed. Considering projects which use of both org.eclipse.emf.common org.eclipse.emf.gwt.common, will cause certain packages to contribute both signed and unsigned classes to the CP, triggering java.lang.SecurityExceptions similar to this: java.lang.SecurityException: class "org.eclipse.emf.common.util.InvocationTargetException"'s signer information does not match signer information of other classes in the same package The exact context in which I was hit by this is a bit involved, but I can imagine it occurring in various situations, for example, if direct use of EMF is taking place on the server side along with EMF-GWT use on the client side, or during development, as result of GWT's tendency to look beyond the web-app CP into the system CP when missing certain classpath entries. Overall I'd rather see all EMF bundles uniformly signed as opposed to this, which would surprise most people IMO. Regardless, the root cause for the SHA1 digest error should be investigated. I'm resolving all old releng bugs because the build has been replaced with a Tycho build: https://bugs.eclipse.org/bugs/show_bug.cgi?id=529487 And the update site has been superseded by: http://download.eclipse.org/modeling/emf/emf/builds/ If there are outstanding issues, please report a new bug based on the new build infrastructure and the new update site. |