Updated Ignition/Ignition Designer Launcher receives warning: Unsigned Legacy Designer

Ignition
1

I updated my Ignition to 8.1.35 and Ignition Designer Launcher to Version 1.1.35. When I "Open Designer" for a Client Gateway address I receive the warning dialog:

"Unsigned Legacy Designer

The jar for this Designer is from an older version of Ignition and is unsigned. Are you sure you want to launch this designer".

I also have debug logging enabled and see this entry:
"WARN [SignatureVerifier ] [2024/01/24 09:04:57]: Target gateway is too old for launchclient.jar signature verification."

I can click okay on the warning and my IgnitionEdge Designer loads as expected, but I am looking to get more info on this warning. My interpretation is that the jar on the Client Gateway is from an older version of Ignition which is incompatible with signature verification using the latest software. Thus, the warning is presented?

If I wanted to resolve this warning, would I have to update the Ignition version on the Client Gateways?

2

Yes, exactly that.
The launchclient signature verification is a mechanism we're using to ensure that, from your local computer's point of view, the arbitrary file delivered by the remote address that it's assuming is an Ignition Gateway, actually is.

It's a somewhat exotic, but absolutely plausible, attack vector - someone gets onto your network somehow, successfully impersonates a Gateway, and then uses the automatic connection of other computers to retrieve the launchclient.jar in order to pivot into local code execution on those other computers.

1 Like
3

Thanks for the information and confirmation!