[jbosstools-issues] [JBoss JIRA] (JBDS-3012) JBDS 7.1.1 installer contains jars signed by GTECyberTrust, which may not be installed on all linux systems

[Denis Golovin (JIRA)]

Denis Golovin created JBDS-3012:
-----------------------------------

             Summary: JBDS 7.1.1 installer contains jars signed by GTECyberTrust, which may not be installed on all linux systems
                 Key: JBDS-3012
                 URL: https://issues.jboss.org/browse/JBDS-3012
             Project: Developer Studio (JBoss Developer Studio)
          Issue Type: Bug
      Security Level: Public (Everyone can see)
          Components: installer, updatesite
    Affects Versions: 7.1.1.GA
            Reporter: Max Rydahl Andersen
            Assignee: Denis Golovin
             Fix For: 8.0.0.Beta2


We have jars in JBDS 7.1.1.GA which were signed using GTECyberTrust. Some linux installs do not include this root cert, so when installing, p2 rejects the cert:

{code}One or more certificates rejected. Cannot proceed with installation.{code}

Full details: https://community.jboss.org/message/866868

*Platform details:*

{code}
Debian Jessie 64 bit
$ uname -a:
Linux Name 3.13-1-amd64 #1 SMP Debian 3.13.7-1 (2014-03-25) x86_64 GNU/Linux
$ java -version
java version "1.7.0_51"
OpenJDK Runtime Environment (IcedTea 2.4.5) (7u51-2.4.5-2)
OpenJDK 64-Bit Server VM (build 24.51-b03, mixed mode)
{code}

Note that Debian 8.0 "Jessie" is not yet released nor has a date for release been announced [0]. The latest stable Debian [1] is 7.4 "Wheezy", released on Feb 8, 2014. [2] The description for "testing" releases like Jessie is "Security updates are irregular and unreliable." [3] So... I don't think we support this OS yet. :)

[0] http://www.debian.org/releases/jessie/
[1] http://www.debian.org/releases/
[2] http://www.debian.org/releases/wheezy/
[3] https://release.debian.org/

*Steps to repro on the above platform:*

1. Downloaded jbdevstudio-product-eap-universal-7.1.1.GA-v20140314-2145-B688.jar
2. Ran java -jar jbdevstudio-product-eap-universal-7.1.1.GA-v20140314-2145-B688.jar stuck to the defaults and clicked thru
3. Install failed with an error re certificates not being trusted
4. Log message in ~/jbdevstudio/studio/p2/director/configuration/1396752621141.log  as follows:

!ENTRY org.eclipse.equinox.p2.engine 8 0 2014-04-06 08:21:42.061
!MESSAGE One or more certificates rejected. Cannot proceed with installation.



--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira