简体繁体 English

Java 7b55-即使Web Start应用程序已签名，也会出现安全警告

[英]java 7b55 - security warnings appear even though web start app is signed

原文 2014-05-22 18:05:25 3 1 java/ java-web-start/ jnlp/ signing

I have an app delivered via Java Web Start that is signed with an official certificate provided by Verisign, and also a self-signed certificate that we have generated. 我有一个通过Java Web Start交付的应用程序，该应用程序使用了Verisign提供的官方证书进行了签名，并且还生成了我们生成的自签名证书。 This is done because we restrict use of the official certificate for the build delivered to customers, but we need to have our test builds signed by a certificate to get the application loaded at all. 这样做是因为我们限制使用正式证书交付给客户的版本，但我们需要让测试版本由证书签名才能完全加载应用程序。

My question is; 我的问题是； is it normal that Java 7b55 still shows security warnings for the self-signed certificate, even though the official certificate is present? 即使存在官方证书，Java 7b55仍然对自签名证书显示安全警告是否正常？ I would expect the official certificate to take precedence but it appears to be not the case. 我希望官方证书具有优先权，但事实并非如此。

Just wondering if anyone else has hit this or if it's unique to my environment.. 只是想知道是否还有其他人遇到了这个问题，或者这是否对我的环境而言是独一无二的。

1 个解决方案

Its shouldn't.... Unless you are using 1 keystore to perform all this. 它不应该...。除非您使用1个密钥库来执行所有这些操作。

Sounds like you are using your self signed keystore that is paired up with the private key inside and that you may have imported the official VeriSign one into the same keystore without matching up with the private key in the inside. 听起来您正在使用与内部私钥配对的自签名密钥库，并且您可能已将官方VeriSign 1导入了相同的密钥库而没有与内部私钥匹配。 Which is probably why the Official VeriSign certificate is not getting read during signing 这可能就是为什么在签名过程中未读取官方VeriSign证书的原因

Usually in situation like yours there should be two keystores. 通常，在像您这样的情况下，应该有两个密钥库。 1 with the self signed and another with the Official Signed certificate. 1个带有自我签名，另一个带有官方签名证书。

~DomSYMC 〜DomSYMC