topic Eclipse Update Site - expired certificate in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/eclipse-update-site-expired-certificate/m-p/183168#M136298 <HTML><HEAD></HEAD><BODY><SPAN>Hello activiti team,</SPAN><BR /><BR /><SPAN>recently I tried to use the activiti designer plugin for Eclipse. I followed the guide:</SPAN><BR /><A href="http://www.activiti.org/userguide/#eclipseDesignerInstallation" rel="nofollow noopener noreferrer">http://www.activiti.org/userguide/#eclipseDesignerInstallation</A><SPAN> or</SPAN><BR /><A href="http://docs.alfresco.com/4.1/tasks/wf-install-activiti-designer.html" rel="nofollow noopener noreferrer">http://docs.alfresco.com/4.1/tasks/wf-install-activiti-designer.html</A><BR /><BR /><SPAN>this is the according update site: </SPAN><A href="http://activiti.org/designer/update/" rel="nofollow noopener noreferrer">http://activiti.org/designer/update/</A><BR /><BR /><SPAN>but our infrastructure refuses to download the necessary (JAR) files because of expired end certificates. </SPAN><BR /><BR /><SPAN>here is the explicit message: "[JSCAN] End certificate expired: File blocked" that I get when trying to download i. e. </SPAN><A href="http://activiti.org/designer/update/plugins/org.eclipse.graphiti.pattern_0.10.1.v20130918-0838.jar" rel="nofollow noopener noreferrer">http://activiti.org/designer/update/plugins/org.eclipse.graphiti.pattern_0.10.1.v20130918-0838.jar</A><BR /><BR /><SPAN>I guess this is related to the following statement from </SPAN><A href="http://docs.oracle.com/javase/7/docs/technotes/guides/security/time-of-signing.html" rel="nofollow noopener noreferrer">http://docs.oracle.com/javase/7/docs/technotes/guides/security/time-of-signing.html</A><SPAN>:</SPAN><BR /><BR /><SPAN>"Because signing certificates typically expire annually, this caused customers significant problems by forcing them to re-sign deployed JAR files annually."</SPAN><BR /><BR /><SPAN>our infrastructure provider uses the software IWSVA from TrendMicro (</SPAN><A href="https://esupport.trendmicro.com/en-us/business/pages/technical-support/interscan-web-security-virtual-appliance-support.aspx" rel="nofollow noopener noreferrer">https://esupport.trendmicro.com/en-us/business/pages/technical-support/interscan-web-security-virtual-appliance-support.aspx</A><SPAN>) to validate Java artifacts. See </SPAN><BR /><A href="https://docs.trendmicro.com/all/ent/iwsva/v5.5/en-us/iwsva_5.5_olh/create_an_applet_and_activex_security_policy.htm" rel="nofollow noopener noreferrer">https://docs.trendmicro.com/all/ent/iwsva/v5.5/en-us/iwsva_5.5_olh/create_an_applet_and_activex_security_policy.htm</A><SPAN> and</SPAN><BR /><A href="https://docs.trendmicro.com/all/ent/iwsva/v5.5/en-us/iwsva_5.5_olh/mmc_policy_java.htm" rel="nofollow noopener noreferrer">https://docs.trendmicro.com/all/ent/iwsva/v5.5/en-us/iwsva_5.5_olh/mmc_policy_java.htm</A><BR /><BR /><SPAN>the question is: do you have to provide a (new) valid eclipse plugin update site? or do I have to inspect and check the IWSVA for outdated routines of checking Java artifacts?</SPAN><BR /><BR /><SPAN>kind regards</SPAN><BR /><BR /><SPAN>stephan krull</SPAN><BR /><SPAN>ecg-leipzig.de</SPAN></BODY></HTML> Wed, 13 May 2015 09:44:21 GMT krulls 2015-05-13T09:44:21Z Eclipse Update Site - expired certificate https://connect.hyland.com/t5/alfresco-archive/eclipse-update-site-expired-certificate/m-p/183168#M136298 Hello activiti team,recently I tried to use the activiti designer plugin for Eclipse. I followed the guide:http://www.activiti.org/userguide/#eclipseDesignerInstallation orhttp://docs.alfresco.com/4.1/tasks/wf-install-activiti-designer.htmlthis is the according update site: http://activiti.org/desig Wed, 13 May 2015 09:44:21 GMT https://connect.hyland.com/t5/alfresco-archive/eclipse-update-site-expired-certificate/m-p/183168#M136298 krulls 2015-05-13T09:44:21Z Re: Eclipse Update Site - expired certificate https://connect.hyland.com/t5/alfresco-archive/eclipse-update-site-expired-certificate/m-p/183169#M136299 <HTML><HEAD></HEAD><BODY><SPAN>Where is the expiration coming from? I see that jar was uploaded 8 juli.</SPAN><BR /><SPAN>As a workaround, you can always download the zip and install manually (see </SPAN><A href="http://activiti.org/designer/archived/" rel="nofollow noopener noreferrer">http://activiti.org/designer/archived/</A><SPAN>).</SPAN></BODY></HTML> Mon, 18 May 2015 14:59:13 GMT https://connect.hyland.com/t5/alfresco-archive/eclipse-update-site-expired-certificate/m-p/183169#M136299 jbarrez 2015-05-18T14:59:13Z Re: Eclipse Update Site - expired certificate https://connect.hyland.com/t5/alfresco-archive/eclipse-update-site-expired-certificate/m-p/183170#M136300 <HTML><HEAD></HEAD><BODY><SPAN>My guess is that the expiration relates to the certificate in the "META-INF" directory of the JARs (see </SPAN><A href="http://docs.oracle.com/javase/7/docs/technotes/guides/security/time-of-signing.html" rel="nofollow noopener noreferrer">here</A><SPAN>). The modification date of the certificates under directory META-INF from this </SPAN><A href="http://activiti.org/designer/update/plugins/org.eclipse.graphiti.pattern_0.10.1.v20130918-0838.jar" rel="nofollow noopener noreferrer">JAR</A><SPAN> are September 2013. </SPAN></BODY></HTML> Tue, 19 May 2015 07:56:42 GMT https://connect.hyland.com/t5/alfresco-archive/eclipse-update-site-expired-certificate/m-p/183170#M136300 krulls 2015-05-19T07:56:42Z