This Bugzilla instance is a read-only archive of historic NetBeans bug reports. To report a bug in NetBeans please follow the project's instructions for reporting issues.

Bug 252076

Summary:	Oracle plugins considered as 3rd-party during validation
Product:	platform	Reporter:	Jiri Kovalsky <jkovalsky>
Component:	Plugin Manager	Assignee:	Libor Fischmeistr <lfischmeistr>
Status:	VERIFIED WONTFIX
Severity:	normal
Priority:	P2
Version:	8.1
Hardware:	PC
OS:	Linux
Issue Type:	DEFECT	Exception Reporter:
Attachments:	Screenshot of "Verify Certificate" dialog with our own plugins folded under "Self signed" 3rd-party plugin category. Compilation of all certificates displayed in "Informations" dialog if user wants to see the signatures.

Description Jiri Kovalsky 2015-04-24 14:12:36 UTC

Created attachment 153370 [details]
Screenshot of "Verify Certificate" dialog with our own plugins folded under "Self signed" 3rd-party plugin category.

Product Version: NetBeans IDE Dev (Build Trunk-Build-1202-on-20150423)
Updates: Updates available
Java: 1.8.0_40; Java HotSpot(TM) 64-Bit Server VM 25.40-b25
Runtime: Java(TM) SE Runtime Environment 1.8.0_40-b25
System: Linux version 3.13.0-24-generic running on amd64; UTF-8; en_US (nb)

Description:
============
Sometimes NetBeans IDE evaluates our plugins as only self-signed 3rd-party plugins which might give impression that user is not installing official NetBeans plugins. This happens when validation fails probably due to certain networking configuration. See attached screenshot and signatures data. Please note that in such situation "Validating..." progress bar still shows some activity even though the "Verify Certificate" dialog was cancelled.

What I was doing:
=================
1. Make sure you are connected to corporate network via VPN client with no proxy server.
2. Make sure $HOME/.netbeans/dev directory does not exist.
3. Extract clean netbeans-build-trunk-201504231408-javase.zip somewhere and launch the vanilla IDE.
4. Download JRebel [1] and Codename One [2] plugin binaries.
5. Invoke "Tools > Plugins" from NetBeans IDE main menu.
6. Switch to "Downloaded" tab and push "Add Plugins..." button.
7. Navigate to folder with the NBM files, multiselect them and push "OK"
button.
8. Make sure both plugins are checked for installation and push "Install"
button.
9. Push "Next >" button, confirm license terms and push "Install" button again.

Expected: After download and validation is done, "Verify Certificate" dialog shows up informing user about only 2 plugins (JRebel and CodenameOne) requiring his/her attention.
Actual: After download and validation is done, "Verify Certificate" dialog shows up informing user that many more plugins are only self-signed including those with valid Oracle signatures.

[1] http://plugins.netbeans.org/download/plugin/3564
[2] http://plugins.netbeans.org/download/plugin/3585

Comment 1 Jiri Kovalsky 2015-04-24 14:15:13 UTC

Created attachment 153372 [details]
Compilation of all certificates displayed in "Informations" dialog if user wants to see the signatures.

Comment 2 Libor Fischmeistr 2015-04-28 11:04:55 UTC

As agreed with Jirka. I'm closing this issue and Jirka is going to reopen it as soon as he's able to reproduce.

Comment 3 Libor Fischmeistr 2015-04-28 11:51:20 UTC

Finally can reproduce. Important - In IDE No proxy has to be set up.

Comment 4 Libor Fischmeistr 2015-04-28 11:52:17 UTC

*** Bug 252072 has been marked as a duplicate of this bug. ***

Comment 5 Libor Fischmeistr 2015-05-21 07:43:21 UTC

As agreed with Jirka Kovalsky, I'm closing the issue.

Comment 6 Jiri Kovalsky 2015-05-21 10:29:50 UTC

Yes, in case somebody else off Oracle wide area network faces this issue too, we will reopen this bug.