Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.java.programmer > #39031

Re: jar signing

Show all headers | View raw

On 7/30/2019 7:24 AM, Eric Douglas wrote:
> My jdk 8 didn't seem to care but when I sign a jar now with OpenJDK 11 it says "Warning: The signer's certificate is self-signed".  Is this acceptable for making jars for an application that only runs on the local domain, or is there a better way to sign jars without paying for a certificate?  Like afaik you have to pay someone to get a certificate to make an https web site.
> 

I don't know a lot about this but I did have at one point a code signing 
certificate that I purchased from GoDaddy.  I was using it for applets 
and webstart programs to be distributed on the internet.  I think I only 
paid about $200 for it but I can't remember for sure now.  What that 
gives you is some credibility that your code is in fact from you but 
mostly I think it gives the certificate provider some of your money :-).

As to self signing your code, I'm not sure what that gives you if it 
doesn't get out to un-trusted spaces.  And I am curious if you are 
signing applications or webstart programs or maybe your library jars?

knute...

Back to comp.lang.java.programmer | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

jar signing Eric Douglas <e.d.programmer@gmail.com> - 2019-07-30 05:24 -0700
  Re: jar signing Knute Johnson <groups@585ranch.com> - 2019-07-30 12:51 -0500
    Re: jar signing Eric Douglas <e.d.programmer@gmail.com> - 2019-07-30 12:26 -0700
      Re: jar signing Knute Johnson <nospam@rabbitbrush.frazmtn.com> - 2019-07-30 16:47 -0500
        Re: jar signing Eric Douglas <e.d.programmer@gmail.com> - 2019-07-31 05:51 -0700

csiph-web