Eclipse Community Forums: Newcomers » New Eclipse installation warns of unsigned content

Home » Newcomers » Newcomers » New Eclipse installation warns of unsigned content(Installing Eclipse IDE for Scout Developers warns of unsigned packages before the installation ends)

New Eclipse installation warns of unsigned content [message #1837377]

Thu, 28 January 2021 17:23

Eclipse User

Please see attached image.

Attempting to install the latest Eclipse on Win 10 x64, I select the Scout IDE option from the installer, but before it finishes, it is prompting that some "content" is unsigned.

I think this shouldn't happen. Is it normal? Should I "Accept" them unsigned? Why?

Thank you

index.php/fa/39848/0/

Attachment: eclipse installer unsigned content warning.png
(Size: 334.69KB, Downloaded 4082 times)

Re: New Eclipse installation warns of unsigned content [message #1837384 is a reply to message #1837377]

Thu, 28 January 2021 23:41

Eclipse User

It should not normally happen, but when the developers screw up the builds and don't sign all the jars properly then this happens. I looked in here:

https://download.eclipse.org/justj/?file=releases/2020-12/202012161000/plugins

Indeed those jars appear to be unsigned so in that case, yes, one would unfortunately expect this to happen.

If you don't accept, the install will fail to complete.

Re: New Eclipse installation warns of unsigned content [message #1837432 is a reply to message #1837384]

Fri, 29 January 2021 13:44

Eclipse User

Thank you for the helpful answer.
I was more inclined to not accept rather than risk having some possibly shady code.
I haven't used Eclipse for years and I am not sure where the installer is downloading the components from, this is why I thought better safe than sorry.

It seems that there's no need to be too much alarmed in this specific case.

Re: New Eclipse installation warns of unsigned content [message #1837445 is a reply to message #1837432]

Sat, 30 January 2021 01:33

Eclipse User

No, not a big need to worry. The repository metadata includes checksums as well and those provide security (the downloaded artifact's checksum must match the expected checksum) even if there is no signature.

Previous Topic:	"while" loop won't work
Next Topic:	Model Explorer

Goto Forum:

-=] Back to Top [=-

Current Time: Mon Jul 14 07:33:55 EDT 2025

.:: Contact :: Home ::.

Breadcrumbs

Sign up to our Newsletter