All geek questions in one place

This jar contains records whose subscriber certificate expires within six months

I signed my jar in various ways, but I keep getting the above error message when I use the command:

jarsigner -verify -verbose [my jar]

Is there any way to get rid of this error? Will my code just stop working after six months if it is not re-certified?

Here is the whole set of commands used to generate the key and sign the Jar:

 keytool -genkey -keystore [keystore] -alias [alias] -validity 2000 keytool -selfcert -keystore [keystore] -alias [alias] -validity 2000 jarsigner -keystore [keystore] [jar] [alias]
+5
source share
1 answer

Is there any way to get rid of this error?

This is not a mistake, but a warning. As for how to avoid this, make sure the certificate is valid for more than 6 months. For a self-signed certificate, it is a matter of providing the correct parameters when generating the key. Here is a keytool example .

 keytool -genkeypair -dname "cn=Mark Jones, ou=Java, o=Oracle, c=US" -alias business -keypass <new password for private key> -keystore /working/mykeystore -storepass <new password for keystore> -validity 180

The important part is -validity 180 . 180 days, or about 6 months, for this example. Use 1800 for 5 years.

Will my code just stop working after six months if it is not re-certified?

Not really.

  • The user in some systems will be warned that the certificate has expired and is invited to accept it. If they do, it will work fine. for example, "signature has expired":
    vgVHN.png
  • Other systems may be configured to automatically reject stale certificates. On these machines, the code will most likely never run or, in rare cases, will not be loaded, but a sandbox will be applied.

I thought all java caching was disabled, as this is annoying when trying to develop.

Applet caching during testing is a big problem. I try to avoid checking applets in the browser while this is absolutely necessary. There are three ways that I know to test applets that will not cache classes.

  • Appletviewer
  • Hybrid applet / app
  • Appleteer (slightly better than applet viewer in some respects, I developed it some time ago)
+12
source

Source: https://habr.com/ru/post/947639/

More articles:


All Articles