Cannot install from board manager

[s1nisteR]

I added the board URL but nothing shows up in my board manager. This board is unusable from Arduino IDE Version 2.

[ShaggyDog18]

strange, it works for me smoothly...

[LUSTgabriel]

I cant use it either....here is my env: Arduino ide version2.3.2 cli version 0.35.3 cpu 7950x windows 10 22h2, i dont think so is my computer promblem, because other lib can be installed correctly.

[LUSTgabriel]

I test the arduino 1.8.18, it works well, plese figure out why this lib can not work on arduino ide version 2.x.x uper

[LUSTgabriel]

I have a intresting descovered...... since i installed arduino 2.3.2 and 1.18.3 same time, and also same place, when i install json file on the old version it seems sync to the new verison well on the application .......why?????

[KenjutsuGH]

I have a intresting descovered...... since i installed arduino 2.3.2 and 1.18.3 same time, and also same place, when i install json file on the old version it seems sync to the new verison well on the application .......why????? !

I am seeing this with the macOS versions as well. Version 1.8.19 will install the board manager files but not Version 2.3.2. After installing with 1.8.19, 2.3.2 will pick it up and can use it.

[koendv]

It's a security problem. On 2.3 the log says "Checking signature" and then "Missing signature file". Looking for a file "package_at32_index.json.sig"?

[ggatis]

Please make it available for installation on Arduino 2.3.4.

[per1234]

I believe the problem is the absence of the size and checksum keys for the platform release entry in the package index:

ArduinoCore-AT32F4/package_at32_index.json

Lines 12 to 39 in e4686b8

	{
	"name": "AT32F403ACGU7 Core Board",
	"architecture": "at32f403a",
	"version": "0.0.9",
	"category": "Contributed",
	"url": "https://github.com/WeActStudio/ArduinoCore-AT32F4/archive/refs/heads/main.zip",
	"archiveFileName": "ArduinoCore-AT32F4-main.zip",
	"help": {
	"online": ""
	},
	"boards": [
	{
	"name": "BlackPill AT32F403ACGU7"
	}
	],
	"toolsDependencies": [
	{
	"packager": "WeActStudio",
	"name": "xpack-arm-none-eabi-gcc",
	"version": "11.2.1-1.2"
	},
	{
	"packager": "WeActStudio",
	"name": "Artery_ISP_Console",
	"version": "0.0.1"
	}
	]
	}

These keys were optional in Arduino IDE 1.x, but are required by default when using Arduino IDE 2.x: arduino/arduino-cli#1468.
An advanced configuration option has been added in Arduino IDE 2.3.5 to make them optional (arduino/arduino-cli#2740, arduino/arduino-ide#2645). I'll provide instructions you can follow to set that configuration:

---

⚠ The checksum validation is done to ensure the platform archive file has not been corrupted or tampered with. So disabling that validation is somewhat risky. This is only intended to serve as a provisional workaround. @WeActStudio should use a URL that pins the platform version (shame on you for not doing that in a production release 🤦) and add the checksum to the package index ASAP.

---

1. Select File > Quit (or Arduino IDE > Quit Arduino IDE for macOS users) from the Arduino IDE menus.
   All Arduino IDE windows will close.
2. Open the file at the following path in any text editor:
   • If you are using Linux: /home/<username>/.arduinoIDE/arduino-cli.yaml (AKA ~/.arduinoIDE/arduino-cli.yaml)
     (where <username> is your Linux username)
     ❗ The .arduinoIDE folder may be hidden by default in your file manager and terminal.
   • If you are using macOS: /Users/<username>/.arduinoIDE/arduino-cli.yaml (AKA ~/.arduinoIDE/arduino-cli.yaml)
     (where <username> is your macOS username)
     ❗ The .arduinoIDE folder is hidden by default. You can make it visible by pressing the Command+Shift+. keyboard shortcut.
   • If you are using Windows: C:\Users\<username>\.arduinoIDE\arduino-cli.yaml
     (where <username> is your Windows username)
3. Add the following line inside the board_manager mapping in the file:

     enable_unsafe_install: true

   For example, if your arduino-cli.yaml file contains this content

   board_manager:
     additional_urls:
       - https://raw.githubusercontent.com/WeActStudio/ArduinoCore-AT32F4/main/package_at32_index.json

   You would change it to this:

   board_manager:
     additional_urls:
       - https://raw.githubusercontent.com/WeActStudio/ArduinoCore-AT32F4/main/package_at32_index.json
     enable_unsafe_install: true

4. Save the file.

Now start Arduino IDE and try installing the platform once again. This time it should be successful.

Reference: https://arduino.github.io/arduino-cli/latest/configuration/

---

It's a security problem. On 2.3 the log says "Checking signature" and then "Missing signature file". Looking for a file "package_at32_index.json.sig"?

I think it is unrelated. The signature file is optional. You will see this message for any download of a package index file which doesn't have a companion .sig file, even with completely functional package index files.