如何使Install4j对所有内容进行签名? [英] How do I make Install4j sign everything?

问题描述

如何在Mac OS X上通过install4j的代码签名更改哪些文件签名?

How do I change what files are signed by install4j's codesigning on Mac OS X?

具体来说，我的应用程序的所有文件(包括其jar文件)均未签名.这完全破坏了代码签名的目的.所以，我想解决这个问题.

Specifically, none of my application's files (including its jar file) are signed. This defeats the purpose of code signing entirely. So, I would like to fix this.

我也想在Windows上做同样的事情，但是可能已经正确处理了(我尚未检查).

I would also like to do the same on Windows, but it's possible that this is already handled correctly (I have not yet checked).

推荐答案

签名的目的不是要以任何方式进行签名的所有内容均已实际签名.

The purpose of signing not that everything that can be signed in any way is actually signed.

Windows 会减少UAC对话框，并在对可执行文件进行签名的情况下以不同的警告级别显示它们.每个请求提升特权的启动程序都必须签名，以便包括安装程序，卸载程序以及可能的启动程序.

Windows reduces UAC dialogs and shows them with a different warning level if executables are signed. Each launcher that requests elevated privileges has to be signed so that includes the installer, the uninstaller and possibly your launchers.

Mac OS X 具有一个网守"，用于检查从Internet下载的应用程序捆绑包是否已签名.如果没有，它将不允许您直接运行它.这就是必须对安装程序应用程序捆绑包进行签名的原因. Gatekeeper不关心安装程序安装的任何应用程序捆绑包，因此默认情况下不对它们进行签名.这主要是一件好事，因为否则安装后，您将无法修改启动器的Info.plist文件.

Mac OS X has a "gatekeeper" that checks if an application bundle that was downloaded from the internet is signed. If not, it will not allow you to run it directly. That's why the installer application bundle has to be signed. Gatekeeper is not concerned with any application bundles that are installed by the installer, so they are not signed by default. This is mostly a good thing, since otherwise you would not be able to modify the Info.plist files of your launchers after the installation.

如果您使用权利来访问Mac OS X上的特定功能，则还需要对启动器进行签名.您可以在启动器向导的可执行信息-> Mac OS X选项"步骤中指定权利文件，然后在Mac OS X媒体文件向导的安装程序选项"步骤中选择签名安装的启动器".

If you use entitlements for gaining access to specific features on Mac OS X your launchers need to be signed as well. You can specify an entitlements file on the "Executable info->Mac OS X options" step of the launcher wizard, and select "Sign installed launchers" on the "Installer options" step of the Mac OS X media file wizard.

install4j与签名JAR文件无关.如果出于某种原因需要此功能，则必须在构建过程中执行此操作.

install4j is not concerned with signing JAR files. If you need this feature for some reason, you have to do this in your build process.

这篇关于如何使Install4j对所有内容进行签名?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！