Bug 565415 - [Chromium] Standalone swt-chromium.jar is not signed.
Summary: [Chromium] Standalone swt-chromium.jar is not signed.
Status: CLOSED WONTFIX
Alias: None
Product: Platform
Classification: Eclipse Project
Component: SWT (show other bugs)
Version: 4.17   Edit
Hardware: PC All
: P3 normal (vote)
Target Milestone: ---   Edit
Assignee: Platform-SWT-Inbox CLA
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: 549585 566608 569095
  Show dependency tree
 
Reported: 2020-07-22 04:59 EDT by Niraj Modi CLA
Modified: 2021-10-04 04:50 EDT (History)
3 users (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Niraj Modi CLA 2020-07-22 04:59:38 EDT
Checked Windows SWT Chromium support libraries, found that it's not signed:
https://download.eclipse.org/eclipse/downloads/drops4/I20200721-1800/download.php?dropFile=swt-chromium-I20200721-1800-win32-win32-x86_64.zip
Comment 1 Guillermo Zunino CLA 2020-07-24 22:48:24 EDT
(In reply to Niraj Modi from comment #0)
> Checked Windows SWT Chromium support libraries, found that it's not signed:
> https://download.eclipse.org/eclipse/downloads/drops4/I20200721-1800/
> download.php?dropFile=swt-chromium-I20200721-1800-win32-win32-x86_64.zip

Checked in I20200724-0600, it seems to be properly signed now:

$ ~/Downloads/sigcheck64.exe chromium-3071/chromium_swt_4936r10.dll

Sigcheck v2.80 - File version and signature viewer
Copyright (C) 2004-2020 Mark Russinovich
Sysinternals - www.sysinternals.com

C:\Users\guille\Downloads\swt\chromium-3071\chromium_swt_4936r10.dll:
        Verified:       Signed
        Signing date:   2:57 AM 7/24/2020
        Publisher:      Eclipse.org Foundation, Inc.
        Company:        n/a
        Description:    n/a
        Product:        n/a
        Prod version:   n/a
        File version:   n/a
        MachineType:    64-bit

guille@DESKTOP-QEDVKOS MINGW64 ~/Downloads/swt
$ ~/Downloads/sigcheck64.exe chromium-3071/chromium_subp-4936r10.exe

Sigcheck v2.80 - File version and signature viewer
Copyright (C) 2004-2020 Mark Russinovich
Sysinternals - www.sysinternals.com

C:\Users\guille\Downloads\swt\chromium-3071\chromium_subp-4936r10.exe:
        Verified:       Signed
        Signing date:   2:57 AM 7/24/2020
        Publisher:      Eclipse.org Foundation, Inc.
        Company:        n/a
        Description:    n/a
        Product:        n/a
        Prod version:   n/a
        File version:   n/a
        MachineType:    64-bit

guille@DESKTOP-QEDVKOS MINGW64 ~/Downloads/swt
$ ~/Downloads/sigcheck64.exe chromium-3071/swt-chromium-win32-4936r10.dll

Sigcheck v2.80 - File version and signature viewer
Copyright (C) 2004-2020 Mark Russinovich
Sysinternals - www.sysinternals.com

C:\Users\guille\Downloads\swt\chromium-3071\swt-chromium-win32-4936r10.dll:
        Verified:       Signed
        Signing date:   2:57 AM 7/24/2020
        Publisher:      Eclipse.org Foundation, Inc.
        Company:        Eclipse Foundation
        Description:    SWT for Windows native library
        Product:        Standard Widget Toolkit
        Prod version:   0,0,0,0
        File version:   4.936.10.0
        MachineType:    64-bit
Comment 2 Lakshmi P Shanmugam CLA 2020-07-28 04:52:31 EDT
The chromium libraries are being signed now. But, swt-chromium.jar in the standalone download (for all platforms) is not yet signed.
Comment 3 Guillermo Zunino CLA 2020-07-28 16:55:02 EDT
(In reply to Lakshmi Shanmugam from comment #2)
> The chromium libraries are being signed now. But, swt-chromium.jar in the
> standalone download (for all platforms) is not yet signed.

Hi Lakshmi,  how do you check?

Doing :
 jarsigner -verify ./swt.jar

shows:
 jar is unsigned.

Neither swt-chromium.jar or swt.jar are signed it seems ?
Comment 4 Lakshmi P Shanmugam CLA 2020-07-29 02:12:28 EDT
(In reply to Guillermo Zunino from comment #3)
> (In reply to Lakshmi Shanmugam from comment #2)
> > The chromium libraries are being signed now. But, swt-chromium.jar in the
> > standalone download (for all platforms) is not yet signed.
> 
> Hi Lakshmi,  how do you check?
> 
> Doing :
>  jarsigner -verify ./swt.jar
> 
> shows:
>  jar is unsigned.
> 
> Neither swt-chromium.jar or swt.jar are signed it seems ?

Hi Guillermo,
I too used jarsigner to verify. Both the jars are not signed. Bug 565566 tracks signing swt.jar.
Comment 5 Niraj Modi CLA 2020-09-02 04:53:12 EDT
Mass move out to 4.18
Comment 6 Niraj Modi CLA 2020-11-23 05:22:01 EST
Resetting target, please re-target as required.
Comment 7 Alexander Kurtakov CLA 2021-10-04 04:50:43 EDT
Chromium has been removed via bug 572010 .