OS X Mountain Lion 上带有自签名证书的 Java 小程序 [英] Java applet with self-signed certificate on OS X Mountain Lion

问题描述

我们有一个需要在完全信任的情况下运行的 Java 小程序.

We have a Java applet that needs to run with full trust.

在开发和预发布测试期间，我们使用自签名证书对其进行签名(生产版本使用真实的代码签名证书进行签名).

While developing and during pre-release tests we sign it using a self-signed certificate (the production version is signed with a real code signing certificte).

但是当我们尝试在 OS X 10.8 的预发布版本上启动自签名小程序时，我们无法再选择允许它运行.允许"按钮被简单地禁用:

But when we try to start the self-signed applet on the prerelases of OS X 10.8, we can no longer choose to allow it to run. The "Allow"-button is simply disabled:

如果我按显示详细信息..."，我可以选择始终信任"证书，但这没有区别:

If I press "Show Details..." I can choose to "Always trust" the certificate, but this makes no difference:

它适用于 OS X Lion 10.7 上相同版本的 Java JRE，所以我怀疑这是操作系统的问题，而不是 JRE.

It works with the same version of the Java JRE on OS X Lion 10.7, so I suspect it is an issue with the OS and not the JRE.

有什么解决方法吗?

我不想使用真实的代码签名证书进行测试:使用真实的代码签名证书签名意味着我的公司断言小程序是安全的，应该被信任.在我们对其进行测试之前，我们很难断言这一点.

I would prefer not to use a real code signing certificate for testing: signing with a real code signing certificate means that my company asserts that the applet is secure and should be trusted. We can hardly assert that before we have tested it.

推荐答案

这是 Mac OS X 中的新安全功能，默认情况下只有来自 Mac Store & 的应用程序.来自受信任的开发人员被允许在那里运行.幸运的是，它很容易更改，您必须在 Mac OS X 首选项中允许.

It is new security feature in Mac OS X, by default only apps from Mac Store & from trusted developers are allowed to run there. Fortunatelly, it is easy to change, you have to allow this in Mac OS X preferences.

转到首选项 -> 安全性 &隐私并点击挂锁以允许更改.

Go to Preferences -> Security & Privacy and click on padlock to allow changes.

然后在允许从以下位置下载的应用程序"中选择任何地方".

Then in "Allow appications downloaded from" select "Anywhere".

之后，Java对话框中的按钮将被启用.

After that, the button in Java dialog will be enabled.

这篇关于OS X Mountain Lion 上带有自签名证书的 Java 小程序的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！