File signature verification failed on package_index.json #7103

heyyprateek · 2018-01-10T05:23:46Z

Has anyone programmed XMC microcontroller by Infineon Technologies using Arduino IDE?

I tried as per the steps given in the GitHub repo of Infineon. Below is the link of the same:

https://github.com/Infineon/XMC-for-Arduino/wiki/Implementation-in-Arduino-IDE

After I copied the .json url in the preferences, I am getting following error:

http://downloads.arduino.cc/packages/package_index.json file signature verification failed. File ignored.

Index error: could not find referenced tool name=arm-none-eabi-gcc version=4.8.3-2014q1 packager=arduino
Index error: could not find referenced tool name=arm-none-eabi-gcc version=4.8.3-2014q1 packager=arduino
Index error: could not find referenced tool name=arm-none-eabi-gcc version=4.8.3-2014q1 packager=arduino
Index error: could not find referenced tool name=arm-none-eabi-gcc version=4.8.3-2014q1 packager=arduino
Index error: could not find referenced tool name=arm-none-eabi-gcc version=4.8.3-2014q1 packager=arduino
Index error: could not find referenced tool name=arm-none-eabi-gcc version=4.8.3-2014q1 packager=arduino
Index error: could not find referenced tool name=arm-none-eabi-gcc version=4.8.3-2014q1 packager=arduino

What can be a possible solution for it? I am running Arduino IDE 1.8.5 on Windows 10. Is this has anything to do with it?

EDIT by @per1234 2018-01-09:
Also posted at http://forum.arduino.cc/index.php?topic=521746

facchinm · 2018-01-10T09:41:13Z

Hi @webstone13 ,
the problem here is that http://downloads.arduino.cc/packages/package_index.json gets ignored due to a certificate error. I am sure that the certificate is ok so the problem must be somewhere else.
Which IDE version are you running? You can try removing manually the cached jsons in

C://Users/youruser/AppData/Arduino15/ if you are on Windows
/Users/youruser/Library/Arduino15/ if you are on Mac
~/.arduino15/ if you are on Linux

and restart the library manager.

heyyprateek · 2018-01-10T09:53:03Z

Hi @facchinm,
I am running Arduino IDE 1.8.5 on Windows 10. What are cached jsons? Are they same as .tmp file in Arduino15 folder. If yes, I have already tried that and it didn't work.

Thanks for the help.

facchinm · 2018-01-10T10:09:08Z

You need to remove all .sig , .json and .tmp in that folder to make sure that everything gets redownloaded. To make sure that nothing happens in the background, keep the IDE closed while doing it.
If it doesn't solve the issue it would help if you could attach here package_index.json and package_index.json.sig so I can check if there is something corrupted, thanks.

heyyprateek · 2018-01-10T10:29:00Z

@facchinm
Didn't work. Please find the .json file in the link below.
https://github.com/Infineon/Assets/releases/download/current/package_infineon_index.json

facchinm · 2018-01-10T11:07:49Z

Sorry if I was not clear enough, the problem seems related with Arduino-provided json (the default one called package_index.json). I need you to attach a zip containing the (json and sig) files that are bing downloaded to your PC (in the Arduino15 folder). Thanks

heyyprateek · 2018-01-12T05:04:07Z

json files.zip

Dear @facchinm
Please find attached all the .json files in Arduino15 folder.

facchinm · 2018-01-12T08:45:33Z

Does your Arduino15 folder only contained that files? No other .json or .sig? I'm starting to think that it could be a problem related with a very strict antivirus running in the background and deleting random files it thinks could harm the system. Try adding the Arduino15 folder to its whitelist and/or check if the needed files (namely package_index.json and package_index.json.sig) has been quarantined.

heyyprateek · 2018-01-12T08:56:39Z

Dear @facchinm
Thanks for your help. I tried doing the same in portbale version of Arduino IDE and it works perfectly fine there.
I don't know what the problem was in the original version but somehow it is working now.

What you are suggesting maybe true. It may be possible as I am trying this on my office PC which is quite secured.

Thanks anyway.

facchinm · 2018-01-12T10:10:05Z

I'm closing the issue in the meantime, changing the title so it may be easier to find if someone else encounters it. Thanks for your time.

jhedup · 2018-02-09T15:18:23Z

Please open the issue again. I get this message on two different computers one on version 1.8.4 and one on 1.8.5: "http://downloads.arduino.cc/packages/package_index.json file signature verification failed. File ignored."

I deleted the 1.8.5 version's Arduino15 directory and reinstalled the IDE a few times without success.

ankitdaf · 2018-02-11T05:05:48Z

+1
Getting the same issue as above, both on windows and linux. Deleting the .arduino15 folder worked on Linux, but did not work on Windows

facchinm · 2018-02-12T08:20:10Z

@jhedup @ankitdaf I just retested it from a clean installation and the signatures are ok. So the problems could be related with:

a temporary network error on our download server
an aggressive antivirus trying to stop the download/tamper the file in some way so the signature is incorrect
Could you retry deleting all Arduino15 folder content right now and check if the problem still applies? Thanks

sheltoncyril · 2018-02-17T23:56:42Z

Still facing the same issue, cannot download SAM boards core because of this. I think most users are facing this. I'm trying to setup my IDE to program an STM32 board but it is dependent on the SAM core, I had to use arduino 1.6.5 as it ignores the file signature verification. Updating it to the latest version doesn't work as it uninstalls the previous version and it starts throwing errors on the console. Even this youtuber I follow has this error shown in one of the videos he made :p https://youtu.be/EaZuKRSvwdo?t=2m31s here's the link to it. Anyway I did find a work around, by installing the portable version of arduino 1.6.5 then copying the tools from that to arduino15 in appdata/local. It still throws errors but I am able to program my STM32 this way. Hope to find a fix soon thx.

sheltoncyril · 2018-02-18T00:28:42Z

Ok I think something was wrong with my JAVA installation and my router. I restarted my router without PPPOE and setx _JAVA_OPTIONS -Djava.net.preferIPv4Stack=true pasted this in CMD. Now it's working fine, but i'm really not sure of what was actually causing it. I doubt my Pi-Hole had anything to do with this but it could be a reason for it.

jhedup · 2018-02-18T06:47:16Z

@facchinm Apologies for the slow response, I am just a weekend warrior. I uninstalled Arduino IDE, deleted Arduino15 folder and manually deleted most reference to Arduino in the Windows 10 registry. I still found the same problem after installing 1.8.5. I will now test over a different network and let you know.

jhedup · 2018-02-18T07:48:13Z

Connected via my mobile ISP on both my note books, one on 1.8.4 left as is as control and the one on 1.8.5 with the fresh install. No success on both. Next up is to check the java settings and turn off anti virus.

sheltoncyril · 2018-02-18T09:04:24Z

Why don't you use 1.6.5r5 temporarily till a permanent fix is found? I'm trying my best to figure it out but my main suspicion is my internet or PPPOE. Was hoping that the issue would come back so that I can find out the exact cause and it did :p after a reboot it started throwing the same errors again, downloading the latest version of java didn't help.
So give me a few hours i'll try and figure a fix for this.

sheltoncyril · 2018-02-18T10:13:01Z

Okay it is definitely a network issue. When I switched over to my mobile network, it immediately started working, but on wifi it keeps throwing the same error. Probably related to PPPOE as disabling that helped me download on my home internet. Will get back with more info soon.

jhedup · 2018-02-18T17:40:42Z

@sheltoncyril Thanks for the update. I tried your Java setting, also did not help. In my case changing the network had not solved the problem. I will use the 1.6.5r5 as you suggested in the mean time.

jhedup · 2018-02-24T04:55:12Z

@facchinm Thank you for fixing! During the week the Boards Managers complained about a file error but now both my fresh 1.6.5.r.5 and my untouched 1.8.4 left as control works. After upgrading 1.6.5.r5 back to 1.8.5 I am happy to say that the reported error now longer occurs.

sheltoncyril · 2018-02-24T08:04:15Z

Sorry I couldn't get back, was kinda busy with my exams :D hope I helped you. @facchinm the issue seems to be fixed now, would like to know why this was occuring.

KamranArain · 2018-08-09T21:59:23Z

I was also facing same issue like signature error. I just connected My PC with my sim card data network and try to download and it works for me. that was network issue that's why it was not working. Thanks for your support.

red-scorp · 2019-06-22T21:23:16Z

Same here with 1.8.9. Can it be IPv6 related issue?

per1234 · 2019-06-22T21:29:08Z

@red-scorp there's a newer issue report for this error which might be more relevant to your situation: #8988

You can provide the information requested on that thread to assist with the investigation.

chrisly42 · 2019-07-07T17:34:36Z

@red-scorp You were right!

After hours of unsuccessful attempts, changing the run.options to

run.options=-Djava.net.preferIPv4Stack

in preferences.txt fixed the issue for me.

red-scorp · 2019-07-07T21:49:06Z

@chrisly42 unfortunately it does not help in my case

bplondon · 2020-03-29T01:43:24Z

Allowing access for arduino.exe in Windows 10 sec. did the job.

hosenmatz · 2020-03-29T13:21:18Z

hello together,
today I was facing the same "signature problem" in Windows 7 for version 1.8.12
solution was to start arduino.exe with administrative rights
hope that helps

H

EdwinRB · 2020-03-30T02:58:33Z

Hi to all.
Same problem here today, IDE 1.8.12, starting arduino.exe with or without administrator privileges
Windows 7 Professional SP1
Please help.
Edwin

EdwinRB · 2020-03-30T14:38:30Z

Hi to all.
Same problem here today, IDE 1.8.12, starting arduino.exe with or without administrator privileges
Windows 7 Professional SP1
Please help.
Edwin

Solved!. I did nothing. I believe that the error was caused by the restrictions, filtering and blocking of the Internet service that we have in my country :(
Regards

playaspec · 2021-07-29T17:09:58Z

Experiencing the same issue under Ubuntu 20.04, Arduino 1.8.15 installed from the tar file. Ran the install script for local install, then straight to the library manager. The IDE itself displays the error:

https://downloads.arduino.cc/libraries/library_index.json.sig file signature verification failed. File ignored.

I run no AV, am not behind NAT (machine directly on a public IPv4 address), and have no firewall rules that could impact operation. From the output in the console, it appears that MD5 validation is failing. I have attached all the output in a zip file.

ArdError.gz

The file: ~/.arduino15/cache/cache.json reads as follows:

{
  "files" : [ {
    "remoteURL" : "https://downloads.arduino.cc/libraries/library_index.json.sig",
    "localPath" : "/home/playaspec/.arduino15/cache/downloads.arduino.cc/libraries/library_index.json.sig",
    "eTag" : "cb2d350a22052a61dafc54fbd47c7796",
    "md5" : "MD5:cb2d350a22052a61dafc54fbd47c7796",
    "createdAt" : "2021-07-29T12:35:50.983",
    "cacheControl" : {
      "maxAge" : 14400,
      "mustRevalidate" : false,
      "noCache" : false,
      "noStore" : false
    },
    "expires" : "2021-07-29T16:35:50.983"
  }, {
    "remoteURL" : "https://downloads.arduino.cc/libraries/library_index.json",
    "localPath" : "/home/playaspec/.arduino15/cache/downloads.arduino.cc/libraries/library_index.json",
    "eTag" : null,
    "md5" : null,
    "createdAt" : "2021-07-29T12:35:51.152",
    "cacheControl" : {
      "maxAge" : 14400,
      "mustRevalidate" : false,
      "noCache" : false,
      "noStore" : false
    },
    "expires" : "2021-07-29T16:35:51.152"
  }, {
    "remoteURL" : "https://downloads.arduino.cc/libraries/library_index.json.gz",
    "localPath" : "/home/playaspec/.arduino15/cache/downloads.arduino.cc/libraries/library_index.json.gz",
    "eTag" : "f9c1b4cc8618c2562a012ae1abe66ba4",
    "md5" : "MD5:f9c1b4cc8618c2562a012ae1abe66ba4",
    "createdAt" : "2021-07-29T12:36:41.202",
    "cacheControl" : {
      "maxAge" : 14400,
      "mustRevalidate" : false,
      "noCache" : false,
      "noStore" : false
    },
    "expires" : "2021-07-29T16:36:41.202"
  } ]
}

The entry for library_index.json has a NULL md5. I downloaded both the .sig and .gz manually, and verified the md5sums match. I then tried editing the cache.json, adding the md5sums I generated from the library_index.json file I downloaded and ran again. It again complained about the library_index.json.sig file not passing the hash check. It rewrote the cache.json file, removing the library_index.json.gz entry completely, and resetting the library_index.json back to NULL values for both the eTag and MD5.

Is it possible that the library_index.json file on the CDN is corrupt or tampered with? How can this deadlock be resolved? I'd really like to get on to the task at hand, but with the number of supply side malware attacks of late, this has me a little spooked.

Could someone please do their due diligence and verify that content on the Arduino's CDN is trustworthy, and explain the root cause of this ongoing problem once it is resolved?

About to hit comment when I reviewed the comments one more time. I had tried adding the run.options=-Djava.net.preferIPv4Stack as @chrisly42 suggested to add to the preferences.txt to no effect. Then I noticed that @sheltoncyril had used run.options=-Djava.net.preferIPv4Stack=true which seems to have worked.

Hope this all helps.

per1234 added the Component: Board/Lib Manager Boards Manager or Library Manager label Jan 10, 2018

facchinm added the Waiting for feedback More information must be provided before we can proceed label Jan 10, 2018

facchinm closed this as completed Jan 12, 2018

facchinm changed the title ~~Error downloading Infineon .json url in Arduino IDE~~ File signature verification failed on package_index.json Jan 12, 2018

per1234 removed the Waiting for feedback More information must be provided before we can proceed label Jan 16, 2018

per1234 added the Type: Bug label Nov 26, 2019

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

File signature verification failed on package_index.json #7103

File signature verification failed on package_index.json #7103

heyyprateek commented Jan 10, 2018 •

edited by per1234

Loading

facchinm commented Jan 10, 2018

heyyprateek commented Jan 10, 2018

facchinm commented Jan 10, 2018

heyyprateek commented Jan 10, 2018

facchinm commented Jan 10, 2018

heyyprateek commented Jan 12, 2018

facchinm commented Jan 12, 2018

heyyprateek commented Jan 12, 2018 •

edited

Loading

facchinm commented Jan 12, 2018

jhedup commented Feb 9, 2018

ankitdaf commented Feb 11, 2018 •

edited

Loading

facchinm commented Feb 12, 2018

sheltoncyril commented Feb 17, 2018

sheltoncyril commented Feb 18, 2018

jhedup commented Feb 18, 2018

jhedup commented Feb 18, 2018 •

edited

Loading

sheltoncyril commented Feb 18, 2018

sheltoncyril commented Feb 18, 2018

jhedup commented Feb 18, 2018 •

edited

Loading

jhedup commented Feb 24, 2018 •

edited

Loading

sheltoncyril commented Feb 24, 2018

KamranArain commented Aug 9, 2018

red-scorp commented Jun 22, 2019 •

edited

Loading

per1234 commented Jun 22, 2019

chrisly42 commented Jul 7, 2019

red-scorp commented Jul 7, 2019

bplondon commented Mar 29, 2020

hosenmatz commented Mar 29, 2020

EdwinRB commented Mar 30, 2020 •

edited

Loading

EdwinRB commented Mar 30, 2020 •

edited

Loading

playaspec commented Jul 29, 2021 •

edited by per1234

Loading

File signature verification failed on package_index.json #7103

File signature verification failed on package_index.json #7103

Comments

heyyprateek commented Jan 10, 2018 • edited by per1234 Loading

facchinm commented Jan 10, 2018

heyyprateek commented Jan 10, 2018

facchinm commented Jan 10, 2018

heyyprateek commented Jan 10, 2018

facchinm commented Jan 10, 2018

heyyprateek commented Jan 12, 2018

facchinm commented Jan 12, 2018

heyyprateek commented Jan 12, 2018 • edited Loading

facchinm commented Jan 12, 2018

jhedup commented Feb 9, 2018

ankitdaf commented Feb 11, 2018 • edited Loading

facchinm commented Feb 12, 2018

sheltoncyril commented Feb 17, 2018

sheltoncyril commented Feb 18, 2018

jhedup commented Feb 18, 2018

jhedup commented Feb 18, 2018 • edited Loading

sheltoncyril commented Feb 18, 2018

sheltoncyril commented Feb 18, 2018

jhedup commented Feb 18, 2018 • edited Loading

jhedup commented Feb 24, 2018 • edited Loading

sheltoncyril commented Feb 24, 2018

KamranArain commented Aug 9, 2018

red-scorp commented Jun 22, 2019 • edited Loading

per1234 commented Jun 22, 2019

chrisly42 commented Jul 7, 2019

red-scorp commented Jul 7, 2019

bplondon commented Mar 29, 2020

hosenmatz commented Mar 29, 2020

EdwinRB commented Mar 30, 2020 • edited Loading

EdwinRB commented Mar 30, 2020 • edited Loading

playaspec commented Jul 29, 2021 • edited by per1234 Loading

heyyprateek commented Jan 10, 2018 •

edited by per1234

Loading

heyyprateek commented Jan 12, 2018 •

edited

Loading

ankitdaf commented Feb 11, 2018 •

edited

Loading

jhedup commented Feb 18, 2018 •

edited

Loading

jhedup commented Feb 18, 2018 •

edited

Loading

jhedup commented Feb 24, 2018 •

edited

Loading

red-scorp commented Jun 22, 2019 •

edited

Loading

EdwinRB commented Mar 30, 2020 •

edited

Loading

EdwinRB commented Mar 30, 2020 •

edited

Loading

playaspec commented Jul 29, 2021 •

edited by per1234

Loading