Re: [cross-project-issues-dev] Eclipse asked if I trust the Eclipse sign

[Doug Schaefer <cdtdoug@xxxxxxxxx>]

It's all the chain of trust. The root certificate, the one at the bottom, should be in your JVM's collection of trusted certificates. Each one signs the one above until you get to the top one which is the one used to sign the jars. As long as the JVM can follow that chain to one it knows, it'll pass the verification.

BTW, this has nothing to do with p2. p2 just uses the facilities the JVM provides.

On Thu, Dec 17, 2015 at 9:37 AM, Lars Vogel <lars.vogel@xxxxxxxxxxx> wrote:

> Did you check the JVM and their trusted certificates? Any changes and/or updates there?

Thanks for the answer Markus. I will have a look, so far I wasn't even
aware that the JVM has its own trusted certificates. I always assumed
Eclipse has this implemented as part of p2.

Best regards, Lars

On Thu, Dec 17, 2015 at 12:38 PM, Markus Knauer
<mknauer@xxxxxxxxxxxxxxxxx> wrote:

> Are the root certificates that are mentioned in the certificate chain
> trusted?
>
> I tried it with my own Mars.1 RCP/RAP package and it worked without showing
> me this dialog.
>
> Regards,
> Markus
>
>
> On 17 December 2015 at 11:50, Lars Vogel <lars.vogel@xxxxxxxxxxx> wrote:
>>
>> Recently Eclipse started to ask me to confirm that I trust the Eclipse
>> certificate, if I want to install something.
>>
>> Example: Using 4.5.1.M20150904-0015 under Ubuntu 15.10 while
>> installing Wikitext support from
>> http://download.eclipse.org/mylyn/snapshots/weekly
>>
>> Is this expected? I used to be that the Eclipse IDE would trust
>> Eclipse signed content automatically
>>
>> Best regards, Lars
>>
>> --
>> Eclipse Platform UI and e4 project co-lead
>> CEO vogella GmbH
>>
>> Haindaalwisch 17a, 22395 Hamburg
>> Amtsgericht Hamburg: HRB 127058
>> Geschäftsführer: Lars Vogel, Jennifer Nerlich de Vogel
>> USt-IdNr.: DE284122352
>> Fax (040) 5247 6322, Email: lars.vogel@xxxxxxxxxxx, Web:
>> http://www.vogella.com
>>
>> _______________________________________________
>> cross-project-issues-dev mailing list
>> cross-project-issues-dev@xxxxxxxxxxx
>> To change your delivery options, retrieve your password, or unsubscribe
>> from this list, visit
>> https://dev.eclipse.org/mailman/listinfo/cross-project-issues-dev
>
>
>
> _______________________________________________
> cross-project-issues-dev mailing list
> cross-project-issues-dev@xxxxxxxxxxx
> To change your delivery options, retrieve your password, or unsubscribe from
> this list, visit
> https://dev.eclipse.org/mailman/listinfo/cross-project-issues-dev



--
Eclipse Platform UI and e4 project co-lead
CEO vogella GmbH

Haindaalwisch 17a, 22395 Hamburg
Amtsgericht Hamburg: HRB 127058
Geschäftsführer: Lars Vogel, Jennifer Nerlich de Vogel
USt-IdNr.: DE284122352
Fax (040) 5247 6322, Email: lars.vogel@xxxxxxxxxxx, Web: http://www.vogella.com
_______________________________________________
cross-project-issues-dev mailing list
cross-project-issues-dev@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/cross-project-issues-dev