NetBeans Forums

 FAQFAQ   SearchSearch   MemberlistMemberlist   RegisterRegister   ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 
  

Plugins in Custom Update Center appear as "Signed but not Trusted"

 
Post new topic   Reply to topic    NetBeans Forums -> NetBeans Developers
View previous topic :: View next topic  
Author Message
sonideft



Joined: 02 Apr 2010
Posts: 13
Location: Halifax, Nova Scotia, Canada

PostPosted: Tue Jul 18, 2017 7:49 pm    Post subject: Plugins in Custom Update Center appear as "Signed but not Trusted" Reply with quote

I recently acquired a Code Signing Certificate from Comodo for use with my NetBeans RCP Application. Signing the installer app.exe was fairly painless and incorporated into my Ant Build.xml script.

I wasn't able to figure out how to get NetBeans to utilize a tsaurl while signing all the nmb's in my app; but I did get my nbm's signed using my code signing certificate. I verified this with jarsigner and also looked into the manifest of the nbm's and found the required *.RSA file there.

When my users download the updates, they are presented with a Dialog listing all the nbm's and state that they are signed but not trusted. Is there another step I am missing or hints of what to check next? I'd like to have them trusted, as that is why I acquired the certificate.

I did resign the nmb's manually using jarsigner again to force the tsurl to be applied. This had no effect on the results. FYI
Back to top
sonideft



Joined: 02 Apr 2010
Posts: 13
Location: Halifax, Nova Scotia, Canada

PostPosted: Thu Jul 20, 2017 2:07 am    Post subject: Follow-up Reply with quote

To be more specific, I am using NetBeans 8.02 still and the clients are using Java 8.0.74 that is bundled with the RCP app, built through Ant.

As an experiment I published another update through my update center. This time the Dialog stating all my nbms were signed but not trusted did not appear. I followed the NetBeans sourcecode and it appears that Java/NetBeans may treat all certificates as untrusted until they are accepted at least once by the end user.

If this is true, I still don't want my users to see this Dialog even the first time. It will confuse them and they may not trust my app. I paid for a code signing certificate so that all trust concerns should be minimized.

Any ideas how I can suppress this Dialog from appearing the first time?
Back to top
sonideft



Joined: 02 Apr 2010
Posts: 13
Location: Halifax, Nova Scotia, Canada

PostPosted: Thu Jul 20, 2017 12:57 pm    Post subject: Reply with quote

I meant to post this to the Platform User Group. Sorry.
Back to top
Display posts from previous:   
Post new topic   Reply to topic    NetBeans Forums -> NetBeans Developers All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB
By use of this website, you agree to the NetBeans Policies and Terms of Use. © 2012, Oracle Corporation and/or its affiliates. Sponsored by Oracle logo