Installing org.eclipse.dd.* from site http://download.eclipse.org/releases/ganymede/staging,
Help -> About Eclipse SDK -> Plug-in Details shows a non-broken
signed
icon with Signing Info "L=Ottawa CN=Eclipse Foundation ST=Ontario
OU=Digital ID Class 3 - Java Object Signing O=Eclipse Foundation C=CA"
Is there something more we must do?
David M Williams wrote:
Please
see
https://bugs.eclipse.org/bugs/show_bug.cgi?id=227333
Thanks
to STP
project (and those that helped them) to get their jars signed.
But,
there are
still unsigned jars ... and these fall into two categories.
1.
org.eclipse.dd jars are unsigned, and there's been some response long
ago in
the bugzilla (which I interpreted to mean "will be done immediately")
but they are not done yet.
Have
we waited
long enough? (I think you all know how I'd respond ... and given
previous
discussions I think I know how you all would respond ... but, I'd
recommend we
have the discussion and an explicit decision made, rather than coasting
along).
2.
There is one
set (of three) that are "partial jars", where some of there content
is not being distributed and users have to supply their own content
(based on
them accepting different license agreements, or something).
So,
these jars
can not be signed, since users do have to modify them after they are
installed.
Given
the
lateness at which this hole as been discovered, I wouldn't argue too
much that
they should be excluded from Ganymede ... though I could be persuaded,
if
someone else wanted to carry that torch ... but would like it made
clear that
this is not a long term solution and I would advocate that for any
future
simultaneous releases, if we have any future such efforts, that this
hole be
plugged and to explicitly disallow unsigned jars (for this particular
reason,
that is).
So
... Planning
Council members, since the rule states "Exceptions authorized by
the planning council for technical reasons." it is now is your
responsibility to exercise your authority.
Thanks,
_______________________________________________
eclipse.org-planning-council mailing list
eclipse.org-planning-council@xxxxxxxxxxx
https://dev.eclipse.org/mailman/listinfo/eclipse.org-planning-council
IMPORTANT: Membership in this list is generated by processes internal to the Eclipse Foundation. To be permanently removed from this list, you must contact emo@xxxxxxxxxxx to request removal.