Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.lang.java.programmer > #39033
| Newsgroups | comp.lang.java.programmer |
|---|---|
| Date | 2019-07-30 12:26 -0700 |
| References | <ce38175e-f242-4b9f-b0d3-2e8f4c0ee16f@googlegroups.com> <qhq03v$vb3$1@dont-email.me> |
| Message-ID | <8e7602de-5cf3-477b-aa3a-b98fcc87b0c8@googlegroups.com> (permalink) |
| Subject | Re: jar signing |
| From | Eric Douglas <e.d.programmer@gmail.com> |
On Tuesday, July 30, 2019 at 1:52:08 PM UTC-4, Knute Johnson wrote: > On 7/30/2019 7:24 AM, Eric Douglas wrote: > > My jdk 8 didn't seem to care but when I sign a jar now with OpenJDK 11 it says "Warning: The signer's certificate is self-signed". Is this acceptable for making jars for an application that only runs on the local domain, or is there a better way to sign jars without paying for a certificate? Like afaik you have to pay someone to get a certificate to make an https web site. > > > > I don't know a lot about this but I did have at one point a code signing > certificate that I purchased from GoDaddy. I was using it for applets > and webstart programs to be distributed on the internet. I think I only > paid about $200 for it but I can't remember for sure now. What that > gives you is some credibility that your code is in fact from you but > mostly I think it gives the certificate provider some of your money :-). > > As to self signing your code, I'm not sure what that gives you if it > doesn't get out to un-trusted spaces. And I am curious if you are > signing applications or webstart programs or maybe your library jars? > > knute... I sign all the jars used by our application on our internal domain. We currently start the application by running a jnlp through Java 8 SE javaws. I am now testing the jump to OpenJDK 11 hotspot, wondering if I can and should continue using this javaws (the last free publish under Java 8 update 202?) or how I can start the application using IcedTea or Openwebstart.
Back to comp.lang.java.programmer | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
jar signing Eric Douglas <e.d.programmer@gmail.com> - 2019-07-30 05:24 -0700
Re: jar signing Knute Johnson <groups@585ranch.com> - 2019-07-30 12:51 -0500
Re: jar signing Eric Douglas <e.d.programmer@gmail.com> - 2019-07-30 12:26 -0700
Re: jar signing Knute Johnson <nospam@rabbitbrush.frazmtn.com> - 2019-07-30 16:47 -0500
Re: jar signing Eric Douglas <e.d.programmer@gmail.com> - 2019-07-31 05:51 -0700
csiph-web