[cross-project-issues-dev] To be able to install newly signed plug-in on Helios and Indigo

[Grégoire Dupé]

Hello,



We are not able to install newly signed plug-ins on Helios, and Indigo. We
get the following error (during the installation of a signed plug-in):

Caused by: java.security.NoSuchAlgorithmException: No algorithm found for
2.16.840.1.101.3.4.2.1

                at
org.eclipse.osgi.internal.signedcontent.PKCS7Processor.findDigest(PKCS7Pro
cessor.java:87)

                at
org.eclipse.osgi.internal.signedcontent.PKCS7Processor.processSignerInfos(
PKCS7Processor.java:311)

                at
org.eclipse.osgi.internal.signedcontent.PKCS7Processor.<init>(PKCS7Process
or.java:133)

                at
org.eclipse.osgi.internal.signedcontent.SignatureBlockProcessor.processSig
ner(SignatureBlockProcessor.java:93)

                at
org.eclipse.osgi.internal.signedcontent.SignatureBlockProcessor.process(Si
gnatureBlockProcessor.java:60)

                at
org.eclipse.osgi.internal.signedcontent.SignedBundleFile.setBundleFile(Sig
nedBundleFile.java:47)

                at
org.eclipse.osgi.internal.signedcontent.SignedBundleHook.getSignedContent(
SignedBundleHook.java:247)



This error happens because the class ‘PKCS7Processor’ embedded in Helios
and Indigo isn’t able to deal with SHA-256. SHA-256 is used since Java-1.7
to sign [1]. I assume that the signing service has been updated to
Java-1.7.



>From the release train point of view this seems to be a good thing. But my
company integrates EMF Facet and MoDisco into its own product and some of
our clients are still using Helios and Java-1.5!



Does anybody have any advice to be able to install newly signed plug-in on
Helios and Indigo?



Regards,

Grégoire Dupé


_______________________________________________
cross-project-issues-dev mailing list
cross-project-issues-dev@eclipse.org
To change your delivery options, retrieve your password, or unsubscribe from 
this list, visit
https://dev.eclipse.org/mailman/listinfo/cross-project-issues-dev