-
-
Notifications
You must be signed in to change notification settings - Fork 7k
package_index.json file signature verification failure for some users #8988
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Comments
@rsora will take care on this. I'm subscribed to the issue, so just ping if you need me! |
I'm reviewing the issue and opening an internal Incident report, I'll keep you posted! |
I have the same problem on two PCs and four different internet connections.. |
I am in NZ too, and I also had the same problem on two different PCs across several web connections. I didn't try tunnelling yet - would have to set something up. I'm still experiencing the issue this morning, and have attached the two files I get. |
not sure if searches will scan the text of our issue, but just in case, I'm pasting the error message displayed on my sketch UI. "package_index.json file signature verification failed. File ignored" |
Thanks for sharing those files @hortynz! They have the same issue as the files shared on the forum by Cheetor. package_index.json is missing the entries for Arduino SAMD Boards 1.8.1 and avrdude 6.3.0-arduino17 that are present in my download from https://downloads.arduino.cc/packages/package_index.json but the checksum of the .sig file matches the checksum of the .sig file I get from https://downloads.arduino.cc/packages/package_index.json.sig. |
Hi there, |
Here are the http headers |
That fixed it, at least for me. Location is Finland. |
Everything is working now! (Estonia) |
here too, thanks |
Can confirm, CDN refresh has worked. I'm now getting the correct file |
http://arduino.esp8266.com/stable/package_esp8266com_index.json file signature verification failed. File ignored. |
Hi @bhavanakrishna, Regarding this issue, having received a positive feedback both in the forum and in the previous message, I'll proceed to close and solve this issue. Thanks to @hortynz @per1234 @anzas @cheetor5923 @ilmarhrundel for providing feedback! |
Hi @rsora, Thank you for your help in advance! |
Hi @BZ840, please provide the HTTP headers you get when requesting the files, so we can look into it! |
Hi @endorama, Thanks! |
Hi @endorama |
I have the same problem and I'm from Canada. https://downloads.arduino.cc/packages/package_index.json It's causing all MKR boards to not be listed and I can't search them in my boards manager. Every once in a while they will pop up again and be listed, but most of the time they are not. It's random and annoying. All of my university projects rely on the MKR1000. |
Same problem package_index.json.sig.txt How can I grab the http header? |
|
Hi @endorama I apologize for any confusion and inconvenience. |
Hi there, Server Side: Java IDE Side: So,
you can download the following preview binaries: #9023 (comment), install them, and tell us if it is working for you and solves the signature problem. In case you experience errors using this IDE preview, please do the following steps in order to share with us the IDE logs:
this way will be able to see better what gone wrong on your system. edit : updated binary download link after some bug fixing made in the PR |
fixed for me (spain) |
In my case (Germany) it is very strange. Sometimes it works and I can update/install boards, and few minutes later it does not work any more. |
Hi @red-scorp, could you please try using this build for the Java IDE: #9023 (comment) and see if it works for you? As I explained here #8988 (comment) we should be able to see what is happening your side inspecting the IDE logs. Thanks a lot! edit: Updated link to binaries |
After another day of testing it still works for me. Many thanks you guys! |
@rsora I've downloaded http://downloads.arduino.cc/javaide/pull_requests/arduino-PR-9023-BUILD-874-windows.zip and put it in portable mode. When I start arduino.exe it shows me a splash screen and does not start an editor. Either this version is bad or my local antivirus is evil (which can be). I'll test on another pc later and let you know.. |
report from another PC: Avast was not happy to run your nonsigned code. Even with disabled antivirus this version is still not able to start editor window. |
Hi there, To download the updated build use this link: #9023 (comment) Thanks a lot! |
After hours of unsuccessful attempts, changing the run.options to run.options=-Djava.net.preferIPv4Stack in preferences.txt fixed the issue for me. |
@chrisly42 same for me, but only for a single run. Now the same error appears again. |
@rsora Now I've tried several times with 1.8.9. I works fine. I can update board packages and stuff. |
@rsora still working... Was it a server issue? |
@rsora still working... Tried with 1.8.7 and portable 1.8.9. Both are working good. |
Getting the problem in Singapore, error is : |
Got the same issue TODAY! But I got latest Windows 10 update yesterday.. java version "1.8.0_221" and Arduino 1.8.9 Got Java errors when I tried to download code to a SAMD21 MCU over CDC /USB as well and was working fine yesterday... package_index.json file signature verification failed |
Bump for Arduino IDE 1.8.10 on Ubuntu 18.04 and Location Germany. |
I was having this issue with Arduino IDE V 1.812. I was able to solve it changing the |
Got the same error today (freshly installed Arduino IDE 1.8.12). Here are headers, location is Israel Thanks :) UPD (2020-05-02): working properly now, thank you :) |
Today I also got this error on a fresh Arduino 1.8.12 install. Here are the headers: My location is the Netherlands. |
Update 12hrs later, now IDE works and problem is solved, in our facebook group many realated same issue, not sure if all of then are solved now. Old and was not working, crashing I'm in Brazil, this issue started today, deleting files in Arduino15 get me to open IDE again, but as soon as those files are created, my IDE dont even open anymore. Already reinstalled arduino IDE and java. Header of https://downloads.arduino.cc/packages/package_index.json And https://downloads.arduino.cc/packages/package_index.json.sig
|
Same issue in Germany package_index.json.sig.header.txt package_index.json.sig.txt Thank you |
Also in Poland, run Board Manager killing Arduino installation, not starting again, version trough 1.8.8, 1.8.9, 1.8.12, in Windows and in Linux. jakub@jakub-F7F: |
Same issue here in Chile (Arduino IDE 1.8.12 for Mac) |
We had a problem on our package_index.json that caused the error and prevented the IDE to start. Windows:
Mac:
Linux:
Please note that the problem that prevents the IDE to start has already been fixed and it's ready for the next release, that's the reason why the Nightly/Beta Builds are not affected, and also the reason why we did not detect this problem earlier, sorry about that! |
I have the same problem: age: 2650 |
@giulianovaraschin can you tell us
It would be nice if you could follow this guide and report here your findings to have a clear understanding of what's going on your side Thanks! |
FYI we forced a cleanup on the CDN Arduino side, this should help to resolve your issue @giulianovaraschin |
We have had four reports of this error on the forum in the last two days. The usual trick of clearing out the data folder and trying again didn't work for any of them. One of the users, Cheetor, provided the package_index.json and package_index.json.sig files they get from https://downloads.arduino.cc/packages/package_index.json and https://downloads.arduino.cc/packages/package_index.json.sig:
I compared these to the files I download from the same URLs and found that their package_index.json file was missing the entries for Arduino SAMD Boards 1.8.1 and avrdude 6.3.0-arduino17, but no differences other than that. The checksum of their .sig file matches mine.
Cheetor is in New Zealand and one of the other reporting users (DavidBMason) is as well. The other two haven't provided their location. The problem stopped occurring for DavidBMason before I could get the bad package_index.json and package_index.json.sig files from them:
https://forum.arduino.cc/index.php?topic=621637.msg4212584#msg4212584
My hypothesis is that there was a recent update to package_index.json but the new .json file didn't make it to a server that provides the files to people in NZ. However, the new .sig file did make it to that server. So they are getting the old .json file but the new .sig file, thus the signature verification. Further evidence of this is that when Cheetor used TOR with an exit node in the USA they got the new version of package_index.json:
https://forum.arduino.cc/index.php?topic=621811.msg4212512#msg4212512
It would be nice if there was some way to make sure that the .json and .sig files will always hit the servers at the same time. I suspect this delay of days on the .json file is a rare glitch but if we regularly have a delay of even minutes that still is going to cause problems for people, more so because of #8936.
Forum threads:
The text was updated successfully, but these errors were encountered: