Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.lang.java.programmer > #39031
| Path | csiph.com!eternal-september.org!feeder.eternal-september.org!reader01.eternal-september.org!.POSTED!not-for-mail |
|---|---|
| From | Knute Johnson <groups@585ranch.com> |
| Newsgroups | comp.lang.java.programmer |
| Subject | Re: jar signing |
| Date | Tue, 30 Jul 2019 12:51:57 -0500 |
| Organization | A noiseless patient Spider |
| Lines | 16 |
| Message-ID | <qhq03v$vb3$1@dont-email.me> (permalink) |
| References | <ce38175e-f242-4b9f-b0d3-2e8f4c0ee16f@googlegroups.com> |
| Mime-Version | 1.0 |
| Content-Type | text/plain; charset=utf-8; format=flowed |
| Content-Transfer-Encoding | 7bit |
| Injection-Date | Tue, 30 Jul 2019 17:51:59 -0000 (UTC) |
| Injection-Info | reader02.eternal-september.org; posting-host="deee704be68e9fd213ef530507056945"; logging-data="32099"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/jFi7xAgMDDg7DNU7febRO" |
| User-Agent | Mozilla/5.0 (Windows NT 6.3; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.8.0 |
| Cancel-Lock | sha1:J4EeGOiT/BnLR4rIPwt39YD68sI= |
| In-Reply-To | <ce38175e-f242-4b9f-b0d3-2e8f4c0ee16f@googlegroups.com> |
| Content-Language | en-US |
| Xref | csiph.com comp.lang.java.programmer:39031 |
Show key headers only | View raw
On 7/30/2019 7:24 AM, Eric Douglas wrote: > My jdk 8 didn't seem to care but when I sign a jar now with OpenJDK 11 it says "Warning: The signer's certificate is self-signed". Is this acceptable for making jars for an application that only runs on the local domain, or is there a better way to sign jars without paying for a certificate? Like afaik you have to pay someone to get a certificate to make an https web site. > I don't know a lot about this but I did have at one point a code signing certificate that I purchased from GoDaddy. I was using it for applets and webstart programs to be distributed on the internet. I think I only paid about $200 for it but I can't remember for sure now. What that gives you is some credibility that your code is in fact from you but mostly I think it gives the certificate provider some of your money :-). As to self signing your code, I'm not sure what that gives you if it doesn't get out to un-trusted spaces. And I am curious if you are signing applications or webstart programs or maybe your library jars? knute...
Back to comp.lang.java.programmer | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
jar signing Eric Douglas <e.d.programmer@gmail.com> - 2019-07-30 05:24 -0700
Re: jar signing Knute Johnson <groups@585ranch.com> - 2019-07-30 12:51 -0500
Re: jar signing Eric Douglas <e.d.programmer@gmail.com> - 2019-07-30 12:26 -0700
Re: jar signing Knute Johnson <nospam@rabbitbrush.frazmtn.com> - 2019-07-30 16:47 -0500
Re: jar signing Eric Douglas <e.d.programmer@gmail.com> - 2019-07-31 05:51 -0700
csiph-web