Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.
Bug 282593 - Signing should not be default-enabled for non-eclipse.org builds
Summary: Signing should not be default-enabled for non-eclipse.org builds
Status: RESOLVED FIXED
Alias: None
Product: z_Archived
Classification: Eclipse Foundation
Component: Dash Athena (show other bugs)
Version: unspecified   Edit
Hardware: PC Linux
: P3 critical (vote)
Target Milestone: ---   Edit
Assignee: Common Build Inbox CLA
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: 254205 280642
  Show dependency tree
 
Reported: 2009-07-06 19:51 EDT by Nick Boldt CLA
Modified: 2012-01-30 11:31 EST (History)
2 users (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Nick Boldt CLA 2009-07-06 19:51:35 EDT
As Dash Athena gains popularity for PDE-based builds away from build.eclipse.org, we need to guard that these builds aren't trying to ssh to dashBuild@build.eclipse.org to do signing. 

Two reasons:

a) signing cert is invalid for anyone but eclipse.org projects
b) only a select few users can ssh to dashBuild@build

Because of this current default, build.eclipse is being hit with ssh "attacks", which may cause that user to become blacklisted/disabled.

Worse (from an end-user POV), these builds will never complete because the Master zip will never get signed and be returned for the build to continue.
Comment 1 Nick Boldt CLA 2009-07-07 00:53:35 EDT
Rolled out to o.e.d.common.releng in 2 files: buildAll{,Helper}.xml in HEAD. Shouldn't break anyone.