| SCN # | SCN-00000006 |
| Title of SCN | Downgrading and Un-signed Installers |
| TRAC # | |
| Effective Version | Public 9.6 |
| Products Affected | Server |
| Reason for Change (Summary) | CyberProtection requirement. Preventing man-in-the-middle attacks. |
Change
Ever since the Server version 5.8, the Update plugin allowed Support to upgrade and downgrade the Server version using the ‘Update’ tab.
Prior to 9.4, the Linux installers were not digitally signed. Beginning in 9.6, the Update plugin will require the installers to be digitally signed before completing the installation process. If you attempt to downgrade beyond 9.4, the Client will display the following failed ‘Update Status’:
With exacqVision Client 9.4 and lower: -22
With exacqVision Client 9.6 and higher: Installer not signed
As a workaround, the software can be downgraded to 9.4 (which does not enforce signing for installers), then downgraded to whatever version is necessary.
Additionally, the un-signed installers can be run manually from within the Server’s Operating System.
Additional Documentation
https://en.wikipedia.org/wiki/Code_signing
https://trac.exacq.com/DVR/ticket/15719
Other Information
Here is an example set of logs from a successful downgrade using the Update plugin:
8/13/2018 2:26:54 PM UpdatePI Verbose Update to http://cdnpublic.exacq.com/8.8/exacqVisionServer-8.8.2.119893_x64.deb
8/13/2018 2:26:54 PM UpdatePI Verbose Update checksum 57afd83ae674c6b89a7b720a43a0843c
8/13/2018 2:26:54 PM UpdatePI Verbose Emit update status: (BUNDLE_DOWNLOAD)
8/13/2018 2:26:54 PM UpdatePI Verbose Downloading http://cdnpublic.exacq.com/8.8/exacqVisionServer-8.8.2.119893_x64.deb
8/13/2018 2:26:54 PM UpdatePI Verbose Writing /usr/local/exacq/server/downloads/exacqVisionServer-8.8.2.119893_x64.deb
8/13/2018 2:26:56 PM UpdatePI Verbose Emit update status: (BUNDLE_DOWNLOAD)
8/13/2018 2:26:57 PM UpdatePI Verbose Emit update status: (BUNDLE_DOWNLOAD)
8/13/2018 2:26:58 PM UpdatePI Verbose Emit update status: (BUNDLE_DOWNLOAD)
8/13/2018 2:26:58 PM UpdatePI Verbose Emit update status: (BUNDLE_DOWNLOAD)
8/13/2018 2:26:58 PM UpdatePI Verbose Emit update status: (BUNDLE_DOWNLOAD)
8/13/2018 2:26:58 PM UpdatePI Verbose Download succeeded.
8/13/2018 2:26:58 PM UpdatePI Verbose Received checksum (57afd83ae674c6b89a7b720a43a0843c).
8/13/2018 2:26:58 PM UpdatePI Verbose Emit update status: (BUNDLE_INSTALL)
8/13/2018 2:26:58 PM UpdatePI Verbose Attempting to install bundle: (/usr/local/exacq/server/downloads/exacqVisionServer-8.8.2.119893_x64.deb)
8/13/2018 2:26:58 PM UpdatePI Verbose Emit update status: (PENDING_UPDATE)
8/13/2018 2:26:58 PM UpdatePI Verbose Update started.
8/13/2018 2:26:59 PM LogPI Warning Stopping Log Manager 9.5.30.140377
8/13/2018 2:27:14 PM LogPI Verbose Opened log file 20180813.txt.
8/13/2018 2:27:14 PM LogPI Warning Starting Log Manager 8.8.2.119893.