OS X 上 Java Web Start 应用程序的身份不明的开发人员 [英] Unidentified developer for Java Web Start application on OS X

问题描述

在 Mac OS X 10.9 上签名的 Java Web Start 应用程序默认被阻止并显示以下消息:

On Mac OS X 10.9 signed Java Web Start applications are blocked by default with the message:

"application.jnlp" can't be opened because it is from an unidentified developer.

我知道可以削弱安全检查以允许任何应用程序运行，但这需要最终用户的手动干预.

I know it's possible to weaken the security checks to allow any application to run, but that requires a manual intervention of the end user.

是否可以对 Java Web Start 应用程序进行签名"，使其被识别为来自已识别的开发人员?

Is it possible to "sign" a Java Web Start application such that it is recognized as originating from an identified developer?

谢谢

推荐答案

Apple 似乎确实支持 webstart 的签名——但不是直接的.您必须将其捆绑在存档中.请参阅此页面底部的注释:

Apple does appear to support signing of webstart -- but not directly. You have to bundle it in an archive. See the note at the bottom of this page:

您可以使用 codesign 实用程序对 JNLP 文件进行签名，这会将代码签名作为扩展属性附加到 JNLP 文件中.要保留这些属性，请将 JNLP 文件打包为 ZIP、XIP 或 DMG 文件.使用 ZIP 格式时要小心，因为某些第三方工具可能无法正确捕获所需的扩展属性.

You can use the codesign utility to sign the JNLP file, which will attach the code signature to the JNLP file as extended attributes. To preserve these attributes, package the JNLP file in a ZIP, XIP, or DMG file. Be careful using the ZIP format, as some third-party tools might not capture the required extended attributes correctly.

另请注意，非 Apple 开发人员不支持 XIP 还有:

Also note that XIP isn't supported for non-Apple developers anymore:

重要提示:从 macOS Sierra 开始，只会扩展由 Apple 签名的 XIP 档案.一直在使用 XIP 存档的开发人员将需要转而使用签名的安装程序包或磁盘映像.

Important: Starting with macOS Sierra, only XIP archives signed by Apple will be expanded. Developers who have been using XIP archives will need to move to using signed installer packages or disk images.

这篇关于OS X 上 Java Web Start 应用程序的身份不明的开发人员的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！