This Bugzilla instance is a read-only archive of historic NetBeans bug reports. To report a bug in NetBeans please follow the project's instructions for reporting issues.

Bug 252076 - Oracle plugins considered as 3rd-party during validation
Summary: Oracle plugins considered as 3rd-party during validation
Status: VERIFIED WONTFIX
Alias: None
Product: platform
Classification: Unclassified
Component: Plugin Manager (show other bugs)
Version: 8.1
Hardware: PC Linux
: P2 normal (vote)
Assignee: Libor Fischmeistr
URL:
Keywords:
: 252072 (view as bug list)
Depends on:
Blocks:
 
Reported: 2015-04-24 14:12 UTC by Jiri Kovalsky
Modified: 2015-05-21 10:29 UTC (History)
0 users

See Also:
Issue Type: DEFECT
Exception Reporter:


Attachments
Screenshot of "Verify Certificate" dialog with our own plugins folded under "Self signed" 3rd-party plugin category. (32.91 KB, image/png)
2015-04-24 14:12 UTC, Jiri Kovalsky
Details
Compilation of all certificates displayed in "Informations" dialog if user wants to see the signatures. (92.45 KB, text/plain)
2015-04-24 14:15 UTC, Jiri Kovalsky
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Jiri Kovalsky 2015-04-24 14:12:36 UTC
Created attachment 153370 [details]
Screenshot of "Verify Certificate" dialog with our own plugins folded under "Self signed" 3rd-party plugin category.

Product Version: NetBeans IDE Dev (Build Trunk-Build-1202-on-20150423)
Updates: Updates available
Java: 1.8.0_40; Java HotSpot(TM) 64-Bit Server VM 25.40-b25
Runtime: Java(TM) SE Runtime Environment 1.8.0_40-b25
System: Linux version 3.13.0-24-generic running on amd64; UTF-8; en_US (nb)

Description:
============
Sometimes NetBeans IDE evaluates our plugins as only self-signed 3rd-party plugins which might give impression that user is not installing official NetBeans plugins. This happens when validation fails probably due to certain networking configuration. See attached screenshot and signatures data. Please note that in such situation "Validating..." progress bar still shows some activity even though the "Verify Certificate" dialog was cancelled.

What I was doing:
=================
1. Make sure you are connected to corporate network via VPN client with no proxy server.
2. Make sure $HOME/.netbeans/dev directory does not exist.
3. Extract clean netbeans-build-trunk-201504231408-javase.zip somewhere and launch the vanilla IDE.
4. Download JRebel [1] and Codename One [2] plugin binaries.
5. Invoke "Tools > Plugins" from NetBeans IDE main menu.
6. Switch to "Downloaded" tab and push "Add Plugins..." button.
7. Navigate to folder with the NBM files, multiselect them and push "OK"
button.
8. Make sure both plugins are checked for installation and push "Install"
button.
9. Push "Next >" button, confirm license terms and push "Install" button again.

Expected: After download and validation is done, "Verify Certificate" dialog shows up informing user about only 2 plugins (JRebel and CodenameOne) requiring his/her attention.
Actual: After download and validation is done, "Verify Certificate" dialog shows up informing user that many more plugins are only self-signed including those with valid Oracle signatures.

[1] http://plugins.netbeans.org/download/plugin/3564
[2] http://plugins.netbeans.org/download/plugin/3585
Comment 1 Jiri Kovalsky 2015-04-24 14:15:13 UTC
Created attachment 153372 [details]
Compilation of all certificates displayed in "Informations" dialog if user wants to see the signatures.
Comment 2 Libor Fischmeistr 2015-04-28 11:04:55 UTC
As agreed with Jirka. I'm closing this issue and Jirka is going to reopen it as soon as he's able to reproduce.
Comment 3 Libor Fischmeistr 2015-04-28 11:51:20 UTC
Finally can reproduce. Important - In IDE No proxy has to be set up.
Comment 4 Libor Fischmeistr 2015-04-28 11:52:17 UTC
*** Bug 252072 has been marked as a duplicate of this bug. ***
Comment 5 Libor Fischmeistr 2015-05-21 07:43:21 UTC
As agreed with Jirka Kovalsky, I'm closing the issue.
Comment 6 Jiri Kovalsky 2015-05-21 10:29:50 UTC
Yes, in case somebody else off Oracle wide area network faces this issue too, we will reopen this bug.