Re: [jetty-users] Looking for update site with all Jetty bundles with same version as the one installed in current Eclipse release

Didier Vojtisek Fri, 25 Mar 2022 05:20:33 -0700

I can try ...  :-/

however, even if I'm not signature specialist, I suspect an issue in thepgp signatures declared in the artefacts.xml (in thehttps://repo1.maven.org/maven2/org/eclipse/jetty/jetty-p2/10.0.7/jetty-p2-10.0.7-p2site.zip)

versus the signature associated to the target jar in maven

for example , in the above zip, I find the following signature in theartefacts.xml (I took the first one in order to avoid ctrl+F in thelong file):

<artifact classifier='osgi.bundle' id='org.eclipse.jetty.io'version='10.0.7'>

      <properties size='10'>
        <property name='artifact.size' value='201509'/>
        <property name='download.size' value='201509'/>

<property name='download.md5'value='390f758950eb984a7d014de459fb4c39'/> <property name='download.checksum.md5'value='390f758950eb984a7d014de459fb4c39'/> <property name='download.checksum.sha-256'value='525975f6de0868ee66a34096186ea20d844ae9f884c6e170add912d4f19ede31'/>

        <property name='maven.artifactId' value='*jetty-io*'/>
        <property name='maven.extension' value='jar'/>
        <property name='maven.version' value='*10.0.7*'/>
        <property name='maven.groupId' value='*org.eclipse.jetty*'/>

<property name='pgp.signatures' value='-----BEGIN PGPSIGNATURE-----
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=B+xb
-----ENDPGP SIGNATURE-----'/>

      </properties>
    </artifact>

but the corresponding asc in maven looks differrent:https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-io/11.0.7/jetty-io-11.0.7.jar.asc(even considering the &# xml char convertion)

Additionally, I don't think this is tycho specific, because I also gotthe same error directly trying to use the urlmvn:org.eclipse.jetty:jetty-p2:10.0.7:zip:p2site in eclipse"install newsoftware" user interface (need m2e installed to support such url)


Didier


On 25/03/2022 11:58, Joakim Erdfelt wrote:

The content in maven is most definitely valid.

That content specifically is used by Eclipse IDE to build the helpsystem present in the IDE.


I do not know what "Signature is invalid" means in this context.

I would suggest reaching out to the Eclipse Tycho folks and askingthem how to resolve this issue.

https://projects.eclipse.org/projects/technology.tycho
Start with sending an email to their tycho-user mailing list.

Joakim Erdfelt / joa...@webtide.com

On Fri, Mar 25, 2022 at 5:42 AM Didier Vojtisek<didier.vojti...@inria.fr> wrote:


    Hi thanks for your answer

    I tried to use the site you propose but none of my install works. 
    The main error is that it fails with a   "Signature is invalid for
    current content." error.

    I used the following urls
    mvn:org.eclipse.jetty:jetty-p2:10.0.7:zip:p2site   (as stated in
    
https://www.eclipse.org/tycho/sitedocs/tycho-p2/tycho-p2-repository-plugin/plugin-info.html)
    I first tried directly with the eclipse installer (after having
    manually installed a bundle containing the package javax.websocket
    that isn't present )

    I also tried a maven tycho build to produce my own update site by
    requiring jetty jar

    Unfortunately both strategies failed with the "Signature is
    invalid"  message ...

    I put a small project illustrating the problem here:
    https://github.com/dvojtise/jetty-eclipse-p2/tree/main/jetty-eclipse-p2-repo
    (you can directly look at the associated github action log)

    Any idea ?

    Didier

    On 24/03/2022 20:27, Joakim Erdfelt wrote:

    The Eclipse Tycho project is the source for bundles from maven
    repositories now.

    It will use the references found in
    https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-p2/ to
    create a local P2 build for you.

    Joakim Erdfelt / joa...@webtide.com


    On Thu, Mar 24, 2022 at 12:13 PM Didier Vojtisek
    <didier.vojti...@inria.fr> wrote:

        Hi

        In eclipse some  Jetty components was bundled in the standard
        eclipse update site. (only a subset of jetty bundles. (cf.
        http://download.eclipse.org/releases/xxx content))

        In our project, we need some extra features for websocket
        management to be used directly from eclipse ( we typically 
        need org.eclipse.jetty.websocket.javax.websocket and
        org.eclipse.jetty.websocket.javax.websocket.server plugins)

        With older version of Eclipse, I was using the following
        update site
        (https://download.eclipse.org/jetty/updates/jetty-bundles-9.x/)
        to complete the installation with compatible jetty bundles.

        In more recent Eclipse, Jetty is now in version 10.x.x

        I tried to install the older one on top of the new one, but
        the installation isn't functional (conflict, and mixing
        versions )
        I also tried to create my own P2 site from jetty jar in maven
        using https://github.com/reficio/p2-maven-plugin . But again,
        get strange conflicts or degraded classloader performances
        making the OSGI platform not usable.

        -> Does anyone know where to find a p2 update site with the
        other jetty bundles that would be compatible with the current
        Eclipse release ?

        thanks

        Didier

--Didier Vojtisek

        SED Rennes - DiverSE Team - LogicA Team
        Inria, Univ Rennes, CNRS, IRISA

        _______________________________________________
        jetty-users mailing list
        jetty-users@eclipse.org
        To unsubscribe from this list, visit
        https://www.eclipse.org/mailman/listinfo/jetty-users


    _______________________________________________
    jetty-users mailing list
    jetty-users@eclipse.org
    To unsubscribe from this list, 
visithttps://www.eclipse.org/mailman/listinfo/jetty-users

--Didier Vojtisek

    SED Rennes - DiverSE Team - LogicA Team
    Inria, Univ Rennes, CNRS, IRISA
    Campus de beaulieu
    35042 Rennes
    02 99 84 75 07

    _______________________________________________
    jetty-users mailing list
    jetty-users@eclipse.org
    To unsubscribe from this list, visit
    https://www.eclipse.org/mailman/listinfo/jetty-users


_______________________________________________
jetty-users mailing list
jetty-users@eclipse.org
To unsubscribe from this list, 
visithttps://www.eclipse.org/mailman/listinfo/jetty-users


--
Didier Vojtisek
SED Rennes - DiverSE Team - LogicA Team
Inria, Univ Rennes, CNRS, IRISA
Campus de beaulieu
35042 Rennes
02 99 84 75 07

_______________________________________________
jetty-users mailing list
jetty-users@eclipse.org
To unsubscribe from this list, visit 
https://www.eclipse.org/mailman/listinfo/jetty-users

Re: [jetty-users] Looking for update site with all Jetty bundles with same version as the one installed in current Eclipse release

Reply via email to