|
|
|
|
Re: Security Exception when building Projects with Xtend [message #1804332 is a reply to message #1804328] |
Fri, 22 March 2019 14:22 |
|
[INFO] Fetching org.eclipse.emf.emfstore.common_1.9.0.v20170530-0703.jar.pack.gz from http://ftp-stud.fht-esslingen.de/pub/Mirrors/eclipse/releases/2019-03/201903201000/plugins/ (1,86MB)
[INFO] Fetching org.eclipse.emf.emfstore.common_1.9.0.v20170530-0703.jar.pack.gz from http://ftp-stud.fht-esslingen.de/pub/Mirrors/eclipse/releases/2019-03/201903201000/plugins/ (1,86MB)
=> this update site looks new. the question is if the content is proper. (maybe a newer or different version was downloaded before)
jarsigner -verify ./.m2/.cache/tycho/org.eclipse.emf.emfstore.common-1.9.0.v20170530-0703.jar/lib/org.apache.commons.lang_2.4.0.v201005080502.jar
jarsigner: java.lang.SecurityException: invalid SHA1 signature file digest for org/apache/commons/lang/math/JVMRandom.class
=> that said plugin is broken. am not sure if it is "too old" or pulled from a bad mirror. or should not be unpackaged or was not before.
Twitter : @chrdietrich
Blog : https://www.dietrich-it.de
|
|
|
|
|
|
Re: Security Exception when building Projects with Xtend [message #1804376 is a reply to message #1804372] |
Mon, 25 March 2019 08:12 |
|
i dont know why this is pulled. therefore you would have to analyze the dependency tree.
i am also not sure what the policy about old artifacts is.
maybe you can also find a possibility in tycho to exclude this from cp
update: maybe you do a import package on some of the packages that got dropped from orbit but may be exported by the plugin org.eclipse.emf.emfstore.common
Export-Package: com.google.common.base;version="10.0.1",com.google.com
mon.collect;version="10.0.1",com.google.common.io;version="2.2.0",org
.apache.commons.io;version="1.9.0",org.apache.commons.io.comparator;v
ersion="2.0.1",org.apache.commons.io.filefilter;version="2.0.1",org.a
pache.commons.io.input;version="2.0.1",org.apache.commons.io.monitor;
version="2.0.1",org.apache.commons.io.output;version="1.9.0",org.apac
he.commons.lang;version="1.9.0",
Twitter : @chrdietrich
Blog : https://www.dietrich-it.de
[Updated on: Mon, 25 March 2019 08:34] Report message to a moderator
|
|
|
Powered by
FUDForum. Page generated in 0.02964 seconds