2013-05-10 19 views
0

嗯,我试着阅读几乎所有的文章,但我还没有找到任何提示。有效的CA签名的小程序仍然显示为未知的发布者

从StartSSL收到我的官方证书后,我仍然无法启动我的小程序没有UNKNOWN发布者警告。

我用

jarsigner Connect4Client.jar MyConnectCert 

我检查与

jarsigner -verify -verbose -certs Connect4Client.jar 

,它看起来一切正常:

s k  1388 Thu May 09 14:04:54 PDT 2013 META-INF/MANIFEST.MF 

     X.509, EMAILADDRESS=<personal>@gmail.com, CN=<personal>, L=<personal> CA, ST=California, C=US (myconnectcert) 
     [certificate is valid from 5/8/13 5:32 PM to 5/9/15 8:38 PM] 
     X.509, CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL (startcom.ca.sub.class2) 
     [certificate is valid from 10/24/07 3:01 PM to 10/24/17 3:01 PM] 
     X.509, CN=StartCom Certification Authority, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL (startcom.ca) 
     [certificate is valid from 9/17/06 12:46 PM to 9/17/36 12:46 PM] 

     1550 Thu May 09 14:04:54 PDT 2013 META-INF/MYCONNEC.SF 
     5771 Thu May 09 14:04:54 PDT 2013 META-INF/MYCONNEC.RSA 
      0 Thu May 09 12:51:24 PDT 2013 META-INF/ 
smk  7437 Thu May 09 12:51:20 PDT 2013 Connect4.class 

     X.509, EMAILADDRESS=<personal>@gmail.com, CN=<personal>, L=<personal> CA, ST=California, C=US (myconnectcert) 
     [certificate is valid from 5/8/13 5:32 PM to 5/9/15 8:38 PM] 
     X.509, CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL (startcom.ca.sub.class2) 
     [certificate is valid from 10/24/07 3:01 PM to 10/24/17 3:01 PM] 
     X.509, CN=StartCom Certification Authority, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL (startcom.ca) 
     [certificate is valid from 9/17/06 12:46 PM to 9/17/36 12:46 PM] 

smk  2588 Thu May 09 12:51:22 PDT 2013 Connect4ClientConnection.class 

     X.509, EMAILADDRESS=<personal>@gmail.com, CN=<personal>, L=<personal> CA, ST=California, C=US (myconnectcert) 
     [certificate is valid from 5/8/13 5:32 PM to 5/9/15 8:38 PM] 
     X.509, CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL (startcom.ca.sub.class2) 
     [certificate is valid from 10/24/07 3:01 PM to 10/24/17 3:01 PM] 
     X.509, CN=StartCom Certification Authority, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL (startcom.ca) 
     [certificate is valid from 9/17/06 12:46 PM to 9/17/36 12:46 PM] 

smk  1410 Thu May 09 12:51:22 PDT 2013 Connect4Engine.class 

     X.509, EMAILADDRESS=<personal>@gmail.com, CN=<personal>, L=<personal> CA, ST=California, C=US (myconnectcert) 
     [certificate is valid from 5/8/13 5:32 PM to 5/9/15 8:38 PM] 
     X.509, CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL (startcom.ca.sub.class2) 
     [certificate is valid from 10/24/07 3:01 PM to 10/24/17 3:01 PM] 
     X.509, CN=StartCom Certification Authority, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL (startcom.ca) 
     [certificate is valid from 9/17/06 12:46 PM to 9/17/36 12:46 PM] 

smk  2901 Thu May 09 12:51:24 PDT 2013 Connect4State.class 

     X.509, EMAILADDRESS=<personal>@gmail.com, CN=<personal>, L=<personal> CA, ST=California, C=US (myconnectcert) 
     [certificate is valid from 5/8/13 5:32 PM to 5/9/15 8:38 PM] 
     X.509, CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL (startcom.ca.sub.class2) 
     [certificate is valid from 10/24/07 3:01 PM to 10/24/17 3:01 PM] 
     X.509, CN=StartCom Certification Authority, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL (startcom.ca) 
     [certificate is valid from 9/17/06 12:46 PM to 9/17/36 12:46 PM] 

smk  2002 Thu May 09 12:51:24 PDT 2013 SocketAction.class 

     X.509, EMAILADDRESS=<personal>@gmail.com, CN=<personal>, L=<personal> CA, ST=California, C=US (myconnectcert) 
     [certificate is valid from 5/8/13 5:32 PM to 5/9/15 8:38 PM] 
     X.509, CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL (startcom.ca.sub.class2) 
     [certificate is valid from 10/24/07 3:01 PM to 10/24/17 3:01 PM] 
     X.509, CN=StartCom Certification Authority, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL (startcom.ca) 
     [certificate is valid from 9/17/06 12:46 PM to 9/17/36 12:46 PM] 

smk 22593 Sat Apr 06 13:16:46 PST 1996 res/applause.au 

     X.509, EMAILADDRESS=<personal>@gmail.com, CN=<personal>, L=<personal> CA, ST=California, C=US (myconnectcert) 
     [certificate is valid from 5/8/13 5:32 PM to 5/9/15 8:38 PM] 
     X.509, CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL (startcom.ca.sub.class2) 
     [certificate is valid from 10/24/07 3:01 PM to 10/24/17 3:01 PM] 
     X.509, CN=StartCom Certification Authority, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL (startcom.ca) 
     [certificate is valid from 9/17/06 12:46 PM to 9/17/36 12:46 PM] 

smk  1864 Sat Apr 06 13:16:28 PST 1996 res/badmove.au 

     X.509, EMAILADDRESS=<personal>@gmail.com, CN=<personal>, L=<personal> CA, ST=California, C=US (myconnectcert) 
     [certificate is valid from 5/8/13 5:32 PM to 5/9/15 8:38 PM] 
     X.509, CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL (startcom.ca.sub.class2) 
     [certificate is valid from 10/24/07 3:01 PM to 10/24/17 3:01 PM] 
     X.509, CN=StartCom Certification Authority, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL (startcom.ca) 
     [certificate is valid from 9/17/06 12:46 PM to 9/17/36 12:46 PM] 

smk  1559 Sat Apr 06 13:16:06 PST 1996 res/bluemove.au 

     X.509, EMAILADDRESS=<personal>@gmail.com, CN=<personal>, L=<personal> CA, ST=California, C=US (myconnectcert) 
     [certificate is valid from 5/8/13 5:32 PM to 5/9/15 8:38 PM] 
     X.509, CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL (startcom.ca.sub.class2) 
     [certificate is valid from 10/24/07 3:01 PM to 10/24/17 3:01 PM] 
     X.509, CN=StartCom Certification Authority, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL (startcom.ca) 
     [certificate is valid from 9/17/06 12:46 PM to 9/17/36 12:46 PM] 

smk  1308 Sat Apr 06 11:43:16 PST 1996 res/blupiece.gif 

     X.509, EMAILADDRESS=<personal>@gmail.com, CN=<personal>, L=<personal> CA, ST=California, C=US (myconnectcert) 
     [certificate is valid from 5/8/13 5:32 PM to 5/9/15 8:38 PM] 
     X.509, CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL (startcom.ca.sub.class2) 
     [certificate is valid from 10/24/07 3:01 PM to 10/24/17 3:01 PM] 
     X.509, CN=StartCom Certification Authority, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL (startcom.ca) 
     [certificate is valid from 9/17/06 12:46 PM to 9/17/36 12:46 PM] 

smk 21870 Sat Apr 06 11:53:30 PST 1996 res/board.gif 

     X.509, EMAILADDRESS=<personal>@gmail.com, CN=<personal>, L=<personal> CA, ST=California, C=US (myconnectcert) 
     [certificate is valid from 5/8/13 5:32 PM to 5/9/15 8:38 PM] 
     X.509, CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL (startcom.ca.sub.class2) 
     [certificate is valid from 10/24/07 3:01 PM to 10/24/17 3:01 PM] 
     X.509, CN=StartCom Certification Authority, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL (startcom.ca) 
     [certificate is valid from 9/17/06 12:46 PM to 9/17/36 12:46 PM] 

smk  957 Tue Apr 09 17:51:48 PDT 1996 res/hand.gif 

     X.509, EMAILADDRESS=<personal>@gmail.com, CN=<personal>, L=<personal> CA, ST=California, C=US (myconnectcert) 
     [certificate is valid from 5/8/13 5:32 PM to 5/9/15 8:38 PM] 
     X.509, CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL (startcom.ca.sub.class2) 
     [certificate is valid from 10/24/07 3:01 PM to 10/24/17 3:01 PM] 
     X.509, CN=StartCom Certification Authority, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL (startcom.ca) 
     [certificate is valid from 9/17/06 12:46 PM to 9/17/36 12:46 PM] 

smk 15817 Sat Apr 06 13:15:50 PST 1996 res/newgame.au 

     X.509, EMAILADDRESS=<personal>@gmail.com, CN=<personal>, L=<personal> CA, ST=California, C=US (myconnectcert) 
     [certificate is valid from 5/8/13 5:32 PM to 5/9/15 8:38 PM] 
     X.509, CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL (startcom.ca.sub.class2) 
     [certificate is valid from 10/24/07 3:01 PM to 10/24/17 3:01 PM] 
     X.509, CN=StartCom Certification Authority, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL (startcom.ca) 
     [certificate is valid from 9/17/06 12:46 PM to 9/17/36 12:46 PM] 

smk  3874 Sat Apr 06 13:15:24 PST 1996 res/redmove.au 

     X.509, EMAILADDRESS=<personal>@gmail.com, CN=<personal>, L=<personal> CA, ST=California, C=US (myconnectcert) 
     [certificate is valid from 5/8/13 5:32 PM to 5/9/15 8:38 PM] 
     X.509, CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL (startcom.ca.sub.class2) 
     [certificate is valid from 10/24/07 3:01 PM to 10/24/17 3:01 PM] 
     X.509, CN=StartCom Certification Authority, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL (startcom.ca) 
     [certificate is valid from 9/17/06 12:46 PM to 9/17/36 12:46 PM] 

smk  1282 Sat Apr 06 11:42:40 PST 1996 res/redpiece.gif 

     X.509, EMAILADDRESS=<personal>@gmail.com, CN=<personal>, L=<personal> CA, ST=California, C=US (myconnectcert) 
     [certificate is valid from 5/8/13 5:32 PM to 5/9/15 8:38 PM] 
     X.509, CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL (startcom.ca.sub.class2) 
     [certificate is valid from 10/24/07 3:01 PM to 10/24/17 3:01 PM] 
     X.509, CN=StartCom Certification Authority, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL (startcom.ca) 
     [certificate is valid from 9/17/06 12:46 PM to 9/17/36 12:46 PM] 

smk 11720 Sat Apr 06 13:15:04 PST 1996 res/sad.au 

     X.509, EMAILADDRESS=<personal>@gmail.com, CN=<personal>, L=<personal> CA, ST=California, C=US (myconnectcert) 
     [certificate is valid from 5/8/13 5:32 PM to 5/9/15 8:38 PM] 
     X.509, CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL (startcom.ca.sub.class2) 
     [certificate is valid from 10/24/07 3:01 PM to 10/24/17 3:01 PM] 
     X.509, CN=StartCom Certification Authority, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL (startcom.ca) 
     [certificate is valid from 9/17/06 12:46 PM to 9/17/36 12:46 PM] 

      0 Wed Apr 17 00:57:50 PDT 2013 res/ 

    s = signature was verified 
    m = entry is listed in manifest 
    k = at least one certificate was found in keystore 
    i = at least one certificate was found in identity scope 

jar verified. 

那么,为什么出版商仍然显示为未知?我错过了什么?另一个证书或这是否与Java 7(已安装)或Safari(10.8)有关?还是因为浏览器无法将StartCom识别为有效的CA?

其他信息: 我检查了Java控制台,得到了以下几点:

cache: Initialize resource manager: [email protected] 
security: property package.access value sun.,com.sun.xml.internal.bind.,com.sun.xml.internal.org.jvnet.staxex.,com.sun.xml.internal.ws.,com.sun.imageio.,com.sun.istack.internal.,com.sun.jmx.,com.sun.proxy.,com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.,com.sun.org.glassfish.external.,com.sun.org.glassfish.gmbal.,apple. 
security: property package.access new value sun.,com.sun.xml.internal.bind.,com.sun.xml.internal.org.jvnet.staxex.,com.sun.xml.internal.ws.,com.sun.imageio.,com.sun.istack.internal.,com.sun.jmx.,com.sun.proxy.,com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.,com.sun.org.glassfish.external.,com.sun.org.glassfish.gmbal.,apple.,com.sun.javaws,com.sun.deploy,com.sun.jnlp 
security: property package.definition value sun.,com.sun.xml.internal.bind.,com.sun.xml.internal.org.jvnet.staxex.,com.sun.xml.internal.ws.,com.sun.imageio.,com.sun.istack.internal.,com.sun.jmx.,com.sun.proxy.,com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.,com.sun.org.glassfish.external.,com.sun.org.glassfish.gmbal.,apple. 
security: property package.definition new value sun.,com.sun.xml.internal.bind.,com.sun.xml.internal.org.jvnet.staxex.,com.sun.xml.internal.ws.,com.sun.imageio.,com.sun.istack.internal.,com.sun.jmx.,com.sun.proxy.,com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.,com.sun.org.glassfish.external.,com.sun.org.glassfish.gmbal.,apple.,com.sun.javaws,com.sun.deploy,com.sun.jnlp 
security: property package.access value sun.,com.sun.xml.internal.bind.,com.sun.xml.internal.org.jvnet.staxex.,com.sun.xml.internal.ws.,com.sun.imageio.,com.sun.istack.internal.,com.sun.jmx.,com.sun.proxy.,com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.,com.sun.org.glassfish.external.,com.sun.org.glassfish.gmbal.,apple.,com.sun.javaws,com.sun.deploy,com.sun.jnlp 
security: property package.access new value sun.,com.sun.xml.internal.bind.,com.sun.xml.internal.org.jvnet.staxex.,com.sun.xml.internal.ws.,com.sun.imageio.,com.sun.istack.internal.,com.sun.jmx.,com.sun.proxy.,com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.,com.sun.org.glassfish.external.,com.sun.org.glassfish.gmbal.,apple.,com.sun.javaws,com.sun.deploy,com.sun.jnlp,org.mozilla.jss 
security: property package.definition value sun.,com.sun.xml.internal.bind.,com.sun.xml.internal.org.jvnet.staxex.,com.sun.xml.internal.ws.,com.sun.imageio.,com.sun.istack.internal.,com.sun.jmx.,com.sun.proxy.,com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.,com.sun.org.glassfish.external.,com.sun.org.glassfish.gmbal.,apple.,com.sun.javaws,com.sun.deploy,com.sun.jnlp 
security: property package.definition new value sun.,com.sun.xml.internal.bind.,com.sun.xml.internal.org.jvnet.staxex.,com.sun.xml.internal.ws.,com.sun.imageio.,com.sun.istack.internal.,com.sun.jmx.,com.sun.proxy.,com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.,com.sun.org.glassfish.external.,com.sun.org.glassfish.gmbal.,apple.,com.sun.javaws,com.sun.deploy,com.sun.jnlp,org.mozilla.jss 
security: property package.access value sun.,com.sun.xml.internal.bind.,com.sun.xml.internal.org.jvnet.staxex.,com.sun.xml.internal.ws.,com.sun.imageio.,com.sun.istack.internal.,com.sun.jmx.,com.sun.proxy.,com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.,com.sun.org.glassfish.external.,com.sun.org.glassfish.gmbal.,apple.,com.sun.javaws,com.sun.deploy,com.sun.jnlp,org.mozilla.jss 
security: property package.access new value sun.,com.sun.xml.internal.bind.,com.sun.xml.internal.org.jvnet.staxex.,com.sun.xml.internal.ws.,com.sun.imageio.,com.sun.istack.internal.,com.sun.jmx.,com.sun.proxy.,com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.,com.sun.org.glassfish.external.,com.sun.org.glassfish.gmbal.,apple.,com.sun.javaws,com.sun.deploy,com.sun.jnlp,org.mozilla.jss,com.sun.browser,com.sun.glass,com.sun.javafx,com.sun.media.jfxmedia,com.sun.media.jfxmediaimpl,com.sun.openpisces,com.sun.prism,com.sun.scenario,com.sun.t2k,com.sun.webpane,com.sun.pisces,com.sun.webkit 
security: property package.definition value sun.,com.sun.xml.internal.bind.,com.sun.xml.internal.org.jvnet.staxex.,com.sun.xml.internal.ws.,com.sun.imageio.,com.sun.istack.internal.,com.sun.jmx.,com.sun.proxy.,com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.,com.sun.org.glassfish.external.,com.sun.org.glassfish.gmbal.,apple.,com.sun.javaws,com.sun.deploy,com.sun.jnlp,org.mozilla.jss 
security: property package.definition new value sun.,com.sun.xml.internal.bind.,com.sun.xml.internal.org.jvnet.staxex.,com.sun.xml.internal.ws.,com.sun.imageio.,com.sun.istack.internal.,com.sun.jmx.,com.sun.proxy.,com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.,com.sun.org.glassfish.external.,com.sun.org.glassfish.gmbal.,apple.,com.sun.javaws,com.sun.deploy,com.sun.jnlp,org.mozilla.jss,com.sun.browser,com.sun.glass,com.sun.javafx,com.sun.media.jfxmedia,com.sun.media.jfxmediaimpl,com.sun.openpisces,com.sun.prism,com.sun.scenario,com.sun.t2k,com.sun.webpane,com.sun.pisces,com.sun.webkit 
basic: tap installed 
basic: Creating PluginEmbeddedFrame served by com.apple.java.jrs.carenderserver-12351 
basic: Done creating PluginEmbeddedFrame 
basic: Added progress listener: [email protected] 
basic: Plugin2ClassLoader.addURL parent called for file:/Users/<personal>/xxxxxxxxxx/Connect4Client.jar 
security: Blacklist revocation check is enabled 
security: Trusted libraries list check is enabled 
security: Trusted libraries list file not found 
network: Cache entry not found [url: file:/Users/<personal>/Desktop/xxxxxxxxxx/Connect4Client.jar, version: null] 
security: Accessing keys and certificate in Mozilla user profile: null 
security: Loading certificates from Deployment session certificate store 
security: Loaded certificates from Deployment session certificate store 
security: Validate the certificate chain using CertPath API 
security: Loading Root CA certificates from /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/lib/security/cacerts 
security: Loaded Root CA certificates from /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/lib/security/cacerts 
security: Obtain certificate collection in Root CA certificate store 
security: Obtain certificate collection in Root CA certificate store 
security: Obtain certificate collection in Root CA certificate store 
security: Obtain certificate collection in Root CA certificate store 
security: The certificate hasnt been expired, no need to check timestamping info 
security: Cannot find jurisdiction list file 
security: The CRL support is disabled 
security: The OCSP support is disabled 
security: This OCSP End Entity validation is disabled 
security: Checking if certificate is in Deployment denied certificate store 
security: Checking if certificate is in Deployment permanent certificate store 
security: Checking if certificate is in Deployment session certificate store 

这是一个StartCom对象代码签名证书。我之前明确导入了StartCom证书,以确保找到这些证书,但仍然无法执行。

+0

那么,您是否检查浏览器证书存储以查看是否包含StartCom的CA证书? – 2013-05-10 03:24:19

+0

DYM你从[StartSSL PKI](http://www.startssl.com/)获得了吗?我不认为这些是** ** **签名证书。它们是域名/网站的证书。 – 2013-05-10 03:39:52

+0

我使用的证书是签署代码的对象代码签名类2证书,它不是一个站点证书。 StartCom提供4个证书:S/MIME,Web服务器SSL,XMPP和目标代码证书。 – mdpb 2013-05-10 04:05:39

回答

1

得到了答案,StartCom回复说他们的证书不适用于Applet签名,这对我来说是一个很大的让步,因为我发现他们在某个网站上提到的价格明确表示他们并不昂贵,并且他们启用了Applet签名。这实际上是真的,但问题在于他们的证书不能解决你所要达到的目标。叹。

相关问题