Java Web Start 证书过期 [英] Expired certificate for Java Web Start

问题描述

JWS 如何应对代码签名证书到期?

How does JWS react to code signing certificate expiration?

根据我的观察，它似乎忽略了 CA 签名证书的到期日期，但我想找到一些确凿的证据(例如官方文档)来证实这一点.

From my observation it appears to ignore expiration date of CA-signed certificates, but I would like to find some hard proof (e.g. official documentation) that confirms this.

推荐答案

如果给签名的 jar 一个时间戳(来自时间戳授权)，那么即使证书过期，签名仍然有效(假设时间戳在到期之前).

If the signed jar is given a timestamp (which comes from a timestamp authority), then the signature will still be valid even after the certificate has expired (assuming the timestamp is prior to the expiry).

参见 J2SE 的签名时间戳支持5.0

这篇关于Java Web Start 证书过期的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！