You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@directory.apache.org by "Emmanuel Lecharny (JIRA)" <ji...@apache.org> on 2007/10/06 15:17:50 UTC

[jira] Created: (DIRSTUDIO-218) Some packages are not signed

Some packages are not signed
----------------------------

                 Key: DIRSTUDIO-218
                 URL: https://issues.apache.org/jira/browse/DIRSTUDIO-218
             Project: Directory Studio
          Issue Type: Task
    Affects Versions: 1.0.1
            Reporter: Emmanuel Lecharny
            Priority: Critical
             Fix For: 1.0.2
         Attachments: Screenshot-Verification .png

When I tried to install the latest Studio version (1.0.1) from the update site, I got a popup telling me that some packages weren't signed. (see attachement)

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Closed: (DIRSTUDIO-218) Some packages are not signed

Posted by "Pierre-Arnaud Marcelot (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/DIRSTUDIO-218?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Pierre-Arnaud Marcelot closed DIRSTUDIO-218.
--------------------------------------------

    Resolution: Fixed

Fixed now that we have the maven build.

> Some packages are not signed
> ----------------------------
>
>                 Key: DIRSTUDIO-218
>                 URL: https://issues.apache.org/jira/browse/DIRSTUDIO-218
>             Project: Directory Studio
>          Issue Type: Task
>    Affects Versions: 1.0.1
>            Reporter: Emmanuel Lecharny
>            Assignee: Pierre-Arnaud Marcelot
>            Priority: Critical
>             Fix For: 1.1.0
>
>         Attachments: Screenshot-Verification .png
>
>
> When I tried to install the latest Studio version (1.0.1) from the update site, I got a popup telling me that some packages weren't signed. (see attachement)

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Commented: (DIRSTUDIO-218) Some packages are not signed

Posted by "Pierre-Arnaud Marcelot (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/DIRSTUDIO-218?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12556628#action_12556628 ] 

Pierre-Arnaud Marcelot commented on DIRSTUDIO-218:
--------------------------------------------------

I confirm that verification is done against the signature applied by the jarsigner tool from Sun.

Once we have moved to maven as build system, it'll be easy to sign every single jar in one shot using the 'jar:sign' task and a keystore.

More information: http://maven.apache.org/plugins/maven-jar-plugin/usage.html

> Some packages are not signed
> ----------------------------
>
>                 Key: DIRSTUDIO-218
>                 URL: https://issues.apache.org/jira/browse/DIRSTUDIO-218
>             Project: Directory Studio
>          Issue Type: Task
>    Affects Versions: 1.0.1
>            Reporter: Emmanuel Lecharny
>            Assignee: Pierre-Arnaud Marcelot
>            Priority: Critical
>             Fix For: 1.1.0
>
>         Attachments: Screenshot-Verification .png
>
>
> When I tried to install the latest Studio version (1.0.1) from the update site, I got a popup telling me that some packages weren't signed. (see attachement)

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Commented: (DIRSTUDIO-218) Some packages are not signed

Posted by "Pierre-Arnaud Marcelot (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/DIRSTUDIO-218?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12533064 ] 

Pierre-Arnaud Marcelot commented on DIRSTUDIO-218:
--------------------------------------------------

This issue is not related to the package signing at Apache (when we release new version).

I need to find more documentation about the way eclipse verifies plugin packages but it seems the verification is done on the jar signing (http://java.sun.com/docs/books/tutorial/deployment/jar/signing.html) done with the "jarsigner" utility from Sun.

> Some packages are not signed
> ----------------------------
>
>                 Key: DIRSTUDIO-218
>                 URL: https://issues.apache.org/jira/browse/DIRSTUDIO-218
>             Project: Directory Studio
>          Issue Type: Task
>    Affects Versions: 1.0.1
>            Reporter: Emmanuel Lecharny
>            Priority: Critical
>             Fix For: 1.0.2
>
>         Attachments: Screenshot-Verification .png
>
>
> When I tried to install the latest Studio version (1.0.1) from the update site, I got a popup telling me that some packages weren't signed. (see attachement)

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Commented: (DIRSTUDIO-218) Some packages are not signed

Posted by "Pierre-Arnaud Marcelot (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/DIRSTUDIO-218?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12552500 ] 

Pierre-Arnaud Marcelot commented on DIRSTUDIO-218:
--------------------------------------------------

More information can be found here: http://wiki.eclipse.org/index.php/JAR_Signing#Overview

> Some packages are not signed
> ----------------------------
>
>                 Key: DIRSTUDIO-218
>                 URL: https://issues.apache.org/jira/browse/DIRSTUDIO-218
>             Project: Directory Studio
>          Issue Type: Task
>    Affects Versions: 1.0.1
>            Reporter: Emmanuel Lecharny
>            Priority: Critical
>             Fix For: 1.0.2
>
>         Attachments: Screenshot-Verification .png
>
>
> When I tried to install the latest Studio version (1.0.1) from the update site, I got a popup telling me that some packages weren't signed. (see attachement)

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (DIRSTUDIO-218) Some packages are not signed

Posted by "Emmanuel Lecharny (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/DIRSTUDIO-218?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Emmanuel Lecharny updated DIRSTUDIO-218:
----------------------------------------

    Attachment: Screenshot-Verification .png

> Some packages are not signed
> ----------------------------
>
>                 Key: DIRSTUDIO-218
>                 URL: https://issues.apache.org/jira/browse/DIRSTUDIO-218
>             Project: Directory Studio
>          Issue Type: Task
>    Affects Versions: 1.0.1
>            Reporter: Emmanuel Lecharny
>            Priority: Critical
>             Fix For: 1.0.2
>
>         Attachments: Screenshot-Verification .png
>
>
> When I tried to install the latest Studio version (1.0.1) from the update site, I got a popup telling me that some packages weren't signed. (see attachement)

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (DIRSTUDIO-218) Some packages are not signed

Posted by "Pierre-Arnaud Marcelot (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/DIRSTUDIO-218?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Pierre-Arnaud Marcelot updated DIRSTUDIO-218:
---------------------------------------------

    Fix Version/s:     (was: 1.0.2)
                   1.1.0
         Assignee: Pierre-Arnaud Marcelot

Assigned to 1.1.0 and me.

> Some packages are not signed
> ----------------------------
>
>                 Key: DIRSTUDIO-218
>                 URL: https://issues.apache.org/jira/browse/DIRSTUDIO-218
>             Project: Directory Studio
>          Issue Type: Task
>    Affects Versions: 1.0.1
>            Reporter: Emmanuel Lecharny
>            Assignee: Pierre-Arnaud Marcelot
>            Priority: Critical
>             Fix For: 1.1.0
>
>         Attachments: Screenshot-Verification .png
>
>
> When I tried to install the latest Studio version (1.0.1) from the update site, I got a popup telling me that some packages weren't signed. (see attachement)

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.