Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.

Bug 405091

Summary:	SecurityException FileDialog signer information does not match signer information of other classes in the same package
Product:	[RT] RAP	Reporter:	Leandro Prusch <prusch>
Component:	Incubator	Assignee:	Project Inbox <rap.incubator-inbox>
Status:	RESOLVED WORKSFORME	QA Contact:
Severity:	normal
Priority:	P3	CC:	mknauer
Version:	2.0
Target Milestone:	---
Hardware:	Macintosh
OS:	Mac OS X
Whiteboard:

Description Leandro Prusch

2013-04-06 18:41:33 EDT

I am adding fileupload to a RWT standalone app, but java throws a SecurityException when loading the incubator FileDialog class. 

This was tried with version 2.0 stable and also nightly builds, but since none of them had classes signatures I though the problem was there. But then I also tried version 1.4, which had the signatures for all classes in the manifest file, but got the same error.

Comment 1 Markus Knauer

2013-04-08 04:17:28 EDT

Hi Leandro,

can you provide the exact version numbers of the bundles and the location where you downloaded the bundles (e.g. p2 repository URL etc.). That'll help me to track down the problem.

Thanks...

Comment 2 Leandro Prusch

2013-04-08 11:48:02 EDT

Hello Markus,

My target definition:

RAP 2.1 - http://download.eclipse.org/rt/rap/2.1
RAP SDSK version is 2.1.0.20130318-2137

FileUpload - http://download.eclipse.org/rt/rap/incubator/nightly/fileupload
RAP File Upload Support (Incubation) version is 2.0.0.20130302-1418

Let me know if you need more info.

Comment 3 Markus Knauer

2013-04-17 10:58:59 EDT

The problem is that (at the moment!) the nightly builds of the RAP project and the RAP Incubator projects are not signed. There are plans to change this and to have all of them signed by default, but we are not there yet.

RAP release builds and RAP milestone builds are signed.

If you are combining a signed RAP (milestone, release) build with an unsigned RAP Incubator component that exports the same Java package you'll get a SecurityException.

Option 1: Use only unsigned builds for both, RAP and the RAP Incubator. You can do this by switching to the nightly builds for both.

Option 2: Remove the cryptographic signature from the main RAP bundles manually.

Option 3: I (manually!) created a signed version of the filedialog bundles in p2 repository http://download.eclipse.org/rt/rap/incubator/2.0/fileupload/ - let me know if this works for you.

Comment 4 Leandro Prusch

2013-04-18 22:02:05 EDT

It worked switching to all nightly builds. 

Can you tell me how to sign the jars? From what I googled, I need a private key for doing that. Is this something I can get somewhere, or is it really private to the bundle's developers?

Thanks a lot Markus!