Signature "Error reading signed content" during update to latest version

Summary

We wanted to upgrade our rather old ubuntu 18.04 with old eclipse. Ubuntu went throught and also eclipse we could update to Version: 2019-12 (4.14.0).

Now when we want to step to an newer version by provbiding the updater url like:

• https://download.eclipse.org/releases/2021-06/
• https://download.eclipse.org/releases/2023-06/

We are getting the "Error reading signed content" (See current bug behaviour)

Steps to reproduce

• Use 2019-12 (4.14.0)
• Add Update URL: https://download.eclipse.org/releases/2023-06/
• Run update

What is the current bug behavior?

2023-06:

An error occurred while collecting items to be installed
session context was:(profile=_home_adminuser_cpp-oxygen_eclipse, phase=org.eclipse.equinox.internal.p2.engine.phases.Collect, operand=, action=).
Problems downloading artifact: osgi.bundle,org.eclipse.equinox.common,3.17.100.v20230202-1341.
Error reading signed content:/tmp/signatureFile2748753225371587561.jar
An error occurred while processing the signatures for the file: /tmp/signatureFile2748753225371587561.jar

2021-06:

An error occurred while collecting items to be installed
session context was:(profile=_home_adminuser_cpp-oxygen_eclipse, phase=org.eclipse.equinox.internal.p2.engine.phases.Collect, operand=, action=).
Problems downloading artifact: osgi.bundle,org.eclipse.equinox.common,3.17.100.v20230202-1341.
Error reading signed content:/tmp/signatureFile5915044844196529172.jar
An error occurred while processing the signatures for the file: /tmp/signatureFile5915044844196529172.jar
Problems downloading artifact: osgi.bundle,org.eclipse.text.quicksearch,1.1.500.v20230129-1959.
Error reading signed content:/tmp/signatureFile7191842187833433469.jar
An error occurred while processing the signatures for the file: /tmp/signatureFile7191842187833433469.jar

What is the expected correct behavior?

Installation went through

Relevant logs and/or screenshots

See above. Here is an similar issue: #2612 (closed) Seems like an signature mismatch, like the log says: An error occurred while processing the signatures for the file.

Priority

• Urgent
• High
• Medium
• Low

Severity

• Blocker
• Major
• Normal
• Low

Impact

@emerks any idea?

changed the description

We also tried to use older "jarsigner" (with alternatives from openjdk 11) without success. Same error as on openJDK 17. Is eclipse actually using "jarsigner" on checking the signature?

I think it's just like this problem:

#2604 (closed)

I.e., at some point the signing started using newer/stronger algorithms to sign the content. But these algorithms are not recognized by older implementations. This is compounded by the fact that for

https://bugs.eclipse.org/bugs/show_bug.cgi?id=572034

Equinox removed its own jar signature checker with the one provided by the JRE/JDK.

We obviously cannot fix 2019-12 (4.14.0).

I think updating to 2021-06 first ought to work, but the above says this does not work. But if I look at the error message, it mentions osgi.bundle,org.eclipse.equinox.common,3.17.100.v20230202-1341 where it's clear that v20230202 does not come from 2021-06's repository but rather the 2023-03 repository. Be sure not to contact all update sites or disable other update sites with newer content.

In any case, nothing is going to retroactively fix older versions nor fix existing repositories, so if updating to 2021-06 does not, one will need to create a new installation...

added NotHelpdesk legacy labels

closed