Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.
Bug 149717 - BIRT Features should be Digitally Signed to Avoid Update Manager Warnings
Summary: BIRT Features should be Digitally Signed to Avoid Update Manager Warnings
Status: RESOLVED FIXED
Alias: None
Product: z_Archived
Classification: Eclipse Foundation
Component: BIRT (show other bugs)
Version: 2.1.1   Edit
Hardware: PC Windows XP
: P3 normal (vote)
Target Milestone: 2.2.0   Edit
Assignee: Xiaoying Gu CLA
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on: 163421
Blocks:
  Show dependency tree
 
Reported: 2006-07-05 14:03 EDT by Paul Clenahan CLA
Modified: 2007-03-28 03:39 EDT (History)
0 users

See Also:


Attachments
Verification Warning Dialog (50.84 KB, image/jpeg)
2006-07-05 14:05 EDT, Paul Clenahan CLA
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Paul Clenahan CLA 2006-07-05 14:03:51 EDT
When installing BIRT 2.1 using the Update Manager, the user receives a number of warnings (one for each "Feature", I think) indicating the Feature is not signed. This is quiet a disconcerting warning (see attached) and may put some user off installing BIRT.

To see this problem, simply follow the installation instructions from the Callisto download site. In summary:

1. Install Eclipse 3.2 IDE
2. In Update Manager, select the BIRT features (and dependencies)
3. Press the "Update" button

For future releases, we need to make sure that the BIRT Features are signed in order to avoid this message.

(Note that this should also probably be part of the Release Checklist to ensure that it is completed for the final builds).
Comment 1 Paul Clenahan CLA 2006-07-05 14:05:00 EDT
Created attachment 45786 [details]
Verification Warning Dialog
Comment 2 Wenfeng Li CLA 2006-07-05 23:43:46 EDT
need to coordinate with other Eclipse projects on how to sign features and plugins. Tentatively schedule for 2.1.1.
Comment 3 Xiaoying Gu CLA 2006-08-10 23:26:16 EDT
I upgraded platform from Eclipse Update Site, the warning message appeared also. It seems some of the eclipse update site jars are not signed also.
Need to coordinate with other Eclipse projects on jar signing.
Comment 4 Xiaoying Gu CLA 2006-11-10 04:46:29 EST
Use signed jars for update site in Milestone/Release build.
Comment 5 Xiaoying Gu CLA 2006-11-24 04:09:51 EST
When updating using signed pack200 files, NPE will be thrown out.

Eclipse.org is using a newer version of the jarprocessor to sign jars. 
See bug https://bugs.eclipse.org/bugs/show_bug.cgi?id=135044.

There seems to be a problem when using older versions to unpack a jar 
signed using the newer one:
https://bugs.eclipse.org/bugs/show_bug.cgi?id=163421.
Comment 6 Xiaoying Gu CLA 2007-03-28 03:39:03 EDT
Tested with Eclipse 3.3M6 + signed birt jars on local server.

"jarprocessor.exclude.children = true"
added to plugin org.eclipse.birt.integration.wtp.ui, which contains eclipse signed jars.