Hi,

Am 17.10.2013 um 21:35 schrieb Nicolas Vervelle:




On Wed, Oct 16, 2013 at 12:45 PM, Egon Willighagen <egon.willighagen@gmail.com> wrote:
> So there is need to find out how to better validate Jmol Java
> certificate at least for the signed applet.
>
> 1.
> I have often seen the warning that the applet has mixed signed and
> unsigned content. That's one point to sort out.
>
> 2.
> Try to have a signature that is recognized as "known publisher"
>
> 3.
> Include that "manifest" in the jar, whatever it is
>
> Jmol community of users,
> anyone has some knowledge of how all this works? Help is appreciated.

I think further information on the new "Permissions" attribute is found here:

http://docs.oracle.com/javase/7/docs/technotes/guides/jweb/no_redeploy.html

Hi,

I get the same kind of problems with other Java application I've developed and which is distributed through Java Web Start (.jnlp file)
I've added the Permissions attribute in the manifest file with "all-permissions" value.
It makes the warning messages less alarming, but it's far from being perfect : users now have to accept every time...

I think the only lasting solution would be to use a trusted certificate to sign Jmol.
But, trusted certificates are expensive (and you have to pay every year) and it will probably less easy to manage the release process over time.

I tried to find cheap certificates, here's what I've found for now :

on the CERTUM site there is a link to https://sklep.unizeto.pl/en/ankieta/form.php and I think it is free


http://stackoverflow.com/questions/1177552/code-signing-certificate-for-open-source-projects
http://stackoverflow.com/questions/10202556/code-signing-for-an-individual-for-open-source-projects


Alex

I'm interested in how this can be solved, I need to do it also for other software.

Nico


------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60135031&iu=/4140/ostg.clktrk_______________________________________________
Jmol-users mailing list
Jmol-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/jmol-users