hschott
Occasional Contributor
Joined 10 years ago
User Profile
User Widgets
Contributions
Re: Do i have to sign my plugin from SoapUI 5.2.1 on?
Hi Manne, well, i understand the intention to sign plug-ins. But the solution is not very well crafted. At first there must be a way for developers to test their code. I see three ways to solve this: 1. without signing 2. by signing with a self-signed certificate like Android development does it (opt-in by the user thru UI dialog) 3. by signing with a developer certificate signed by Smartbear like Apple development does it At second there should be a documented and working process how to get a plug-in reviewed and signed for production. Both points require a medum to large infrastructure and management effort backed by tools and staff. Are you aware of this? Regards, Holger4.9KViews2likes2CommentsRe: Do i have to sign my plugin from SoapUI 5.2.1 on?
Hi, for all of you running into the same problem i recommend to have a look at https://github.com/hschott/soapui-pluginloader-jailbreak . This little peace of code will help you to bypass the ProductBodyguard, while testing your plugin. Regards, Holger6.9KViews0likes0CommentsRe: Do i have to sign my plugin from SoapUI 5.2.1 on?
Hi Tanya, i'm sorry but i can not accept that. This change has a very deep impact on the behavoir of SoapUI OS. It was done on a patch level version change 5.2.0 > 5.2.1. It is nowhere documented. There is no hint in the release notes. It does not correspond to the idea of community driven open source. Please revert this change in the next release. Regards, Holger7KViews2likes1CommentRe: Do i have to sign my plugin from SoapUI 5.2.1 on?
Hi, thanks for that link. But it did not help me much. I already have a developed a plugin. You can find it on GitHub (https://github.com/hschott/ready-websocket-plugin) and it is listed on the page you linked to. I have developed against SoapUI OS 5.2.0 with no problems. When running the same plugin inside SoapUI OS 5.2.1 i'm getting an error message, that the plugin could not be loaded, because it is not signed by Smartbear. 09:01:50,412 ERROR [SoapUI] An error occurred [The plugin '/Users/hos/.soapuios/plugins/ready-websocket-plugin.jar' has unsigned class files.], see error log for details Please see also this Pull request on GitHub https://github.com/SmartBear/soapui/pull/201 . Any ideas about that. Regards, Holger7KViews2likes16CommentsDo i have to sign my plugin from SoapUI 5.2.1 on?
Hi, i have cloned SoapUI form GitHub to test my plugin against the latest development branch. To my surpirse the plugin wasn't loaded anymore. An error message was shown in the log that the plugin was not loaded because it contains unsigned classes. After digging into the code i found a ProductBodyguard.java which was newly introduced in September '15. This class is responsible for checking the signature of loaded plugin classes to a smartbear public certificate. My questions so far: Who is responsible for signing plugin jars from the community? How does this align to the idea of open source? Any discussion is very welcome. Regards, Holger8.3KViews2likes20Comments