Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.

Bug 561500

Summary: SHA-512 not displayed on download page
Product: Community Reporter: James Garrison <jhg>
Component: WebsiteAssignee: Eric Poirier <eric.poirier>
Status: RESOLVED FIXED QA Contact:
Severity: normal    
Priority: P3 CC: chris.guindon, david.balazic, rolf.theunissen, steve, xerces9
Version: unspecified   
Target Milestone: ---   
Hardware: PC   
OS: Windows 10   
Whiteboard:
Attachments:
Description Flags
Screenshot none

Description James Garrison CLA 2020-03-26 14:29:05 EDT
Created attachment 282242 [details]
Screenshot

On the Win64 download page (and possibly others) (https://www.eclipse.org/downloads/download.php?file=/oomph/epp/2020-03/R/eclipse-inst-win64.exe) there's a button to display the SHA-512 signature for the executable.

When clicked, the page displays an empty text box with no signature. See attached screenshot.
Comment 1 James Garrison CLA 2020-03-26 14:29:58 EDT
Browser is Firefox 74.0 64-bit
Comment 2 Eclipse Webmaster CLA 2020-03-26 17:05:36 EDT
The checksum is there now.

There can be some delay between the download request and the checksums being generated.

-M.
Comment 3 James Garrison CLA 2020-03-26 19:24:36 EDT
So, this appears to be a problem with Firefox.  The signature displays immediately in Edge.
Comment 4 James Garrison CLA 2020-03-26 19:37:25 EDT
https://bugzilla.mozilla.org/show_bug.cgi?id=1625347
Comment 5 Rolf Theunissen CLA 2020-05-12 02:05:18 EDT
Checksum is still not shown in FireFox, also not in 68.8.0esr.

Also reported on the forum:
https://www.eclipse.org/forums/index.php?t=rview&goto=1827262
Comment 6 Rolf Theunissen CLA 2020-05-12 02:13:03 EDT
When Firefox is started in safe mode the SHA-512 does show up.
Comment 7 Rolf Theunissen CLA 2020-05-12 02:26:49 EDT
After accepting cookies, the checksum generation is blocked by uBlock.
Comment 8 Eclipse Webmaster CLA 2020-05-12 10:48:11 EDT
If this is caused by a browser extension, I'm not sure that this is something we can fix.

-M.
Comment 9 David Balažic CLA 2020-09-21 11:01:16 EDT
I see this problem on https://www.eclipse.org/downloads/download.php?file=/technology/epp/downloads/release/2020-09/R/eclipse-jee-2020-09-R-win32-x86_64.zip

Firefox 80.0.1 on Windows.

I don't have any non-default plugins or extensions.

It does work with a clean fresh profile.

I don't see why such basic functionality must be implemented with such heavy scripting magic that randomly fails. At least put there a link to a static page with checksums.
Comment 10 Steve Kelem CLA 2021-01-07 15:01:53 EST
I see this problem for the link https://www.eclipse.org/downloads/download.php?file=/technology/dltk/downloads/drops/R5.7/R-5.7.1-201703020501/dltk-core-R-5.7.1-201703020501.zip

I see no checksum in Firefox on Ubuntu Linux 20.10, or on Windows 10.
I see no checksum in Google Chrome on Windows 10.
I see the checksum in Google Chrome on Ubuntu Linux 20.10.
I see the checksum in Edge on Windows 10.
Comment 11 David Balažic CLA 2021-01-14 10:27:48 EST
(In reply to Steve Kelem from comment #10)
> I see this problem for the link
> https://www.eclipse.org/downloads/download.php?file=/technology/dltk/
> downloads/drops/R5.7/R-5.7.1-201703020501/dltk-core-R-5.7.1-201703020501.zip

Firefox 84.0.2 on Windows 10:
 - profile 1 : works, except if the SHA-512 button is clicked very fast, before the page fully loads. Then it displays an empty box. Clicking the button again shows the checksum then.

 - profile 2 : mostly works, except: 
  - open private browsing window
  - open the above URL
  - click the accept cookies link at the bottom
  - reload page (F5)
  - click SHA-512 button

Result: empty box opens

Clicking the SHA-512 button again makes it fade out and fade in, but still empty
Comment 12 Christopher Guindon CLA 2021-01-14 14:53:50 EST
Eric, 

can you take a look at this and see if we can make some improvements to our checksum toggle?

The issue seems to occur on firefox.
Comment 13 Eric Poirier CLA 2021-01-15 09:22:23 EST
(In reply to Christopher Guindon from comment #12)
> Eric, 
> 
> can you take a look at this and see if we can make some improvements to our
> checksum toggle?
> 
> The issue seems to occur on firefox.

I can't reproduce this on Firefox for Mac.

But I'll try to look at the code for improvements.
Comment 14 Eric Poirier CLA 2021-01-15 11:27:58 EST
As per David's comment #11, I was able to reproduce the empty box if I hit the SHA 512 button before the page loads completely. But if I hit the button again, I can see the SHA-512 signature in the box.

I can confirm that the signature do appear if the page is fully loaded.

I'll have a look and will find a solution to optimize this.
Comment 15 Christopher Guindon CLA 2021-01-15 11:32:43 EST
(In reply to Eric Poirier from comment #14)
> As per David's comment #11, I was able to reproduce the empty box if I hit
> the SHA 512 button before the page loads completely. But if I hit the button
> again, I can see the SHA-512 signature in the box.
> 
> I can confirm that the signature do appear if the page is fully loaded.
> 
> I'll have a look and will find a solution to optimize this.

Great job on identifying the root of the issue!
Comment 16 Eric Poirier CLA 2021-01-15 12:43:44 EST
(In reply to David Balažic from comment #11)
>  - profile 2 : mostly works, except: 
>   - open private browsing window
>   - open the above URL
>   - click the accept cookies link at the bottom
>   - reload page (F5)
>   - click SHA-512 button
> 
> Result: empty box opens
> 
> Clicking the SHA-512 button again makes it fade out and fade in, but still
> empty

I was also able to reproduce this using Firefox for Mac (private window in Chrome is working properly).

Looking at the console logs I can see the following JS error:
Uncaught TypeError: ga.getAll is not a function

This is related to Google Analytics but the error comes up every time I click on the SHA 512 button.

I found the following article which is talking about how FireFox's private windows will block content coming from external websites to track users (such as Google Analytics).

https://developer.mozilla.org/en-US/docs/Mozilla/Firefox/Privacy/Tracking_Protection
Comment 17 Eric Poirier CLA 2021-01-18 08:58:54 EST
I made an update to the JS on Friday which is now on production.

The SHA-512 is now working in FireFox private windows after accepting the cookie consent.

I'll close the bug but please let me know if you're still having issues.

Thanks.