是否可以免费签署java小程序?
我制作了一个奇怪的小程序,它可以让你用你的声音绘画。显然,它需要访问麦克风,但 Java 小程序除非经过签名,否则不允许访问。据我所知,这很困难并且涉及密码学,虽然还不清楚,但我认为我也应该向威瑞信支付金钱。对我来说,这一切似乎都是偏执的创新令人窒息的废话**,我想我不是第一个这么想的人。
有没有办法“出于教育或测试目的”绕过这个问题?或者关闭浏览器的安全功能?或者免费签署小程序?
我使用的是 Ubuntu 9.04、Firefox 3.0.15 和 Java 1.6.0
I made a weird applet which allows you to paint with your voice. Obviously it requires access to the microphone, but Java applets are not allowed access unless they are signed. As far as I can tell its difficult and involves cryptography, and, though its not clear, I think that I'm expected to pay MONEY to Verisign as well. This all seems like a lot of paranoid innovation stifling bullsh** to me and I figure I'm not the first person to think so.
Is there just some way to bypass this "for educational or testing purposes?" or maybe turn off the security in my browser? or sign the applet for free?
I'm on Ubuntu 9.04 with Firefox 3.0.15 and Java 1.6.0
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(2)
您可以更进一步,使用 OpenSSL 设置您自己的 CA。
这将允许您创建自己的根证书并生成任意数量的签名或 SSL 证书。然后,您可以将根证书分发给您的朋友,并要求他们在各自的浏览器中安装它。之后,由您的 CA 创建的证书的证书链将始终有效且不是自签名的(许多浏览器看不起自签名的证书)。
如果您要使用 OpenSSL CA,您可能需要 pkeytool 将私钥导入到 java 密钥库文件中。
You may go one step further and setup your own CA with OpenSSL.
This will allow you to create your own root certificate and generate any number of signing or SSL sertificates. You may then distribute your root certificate to your friends and ask them to install it in their respective browsers. After that the certificate chain for certificates create by your CA will always be valid and not self-signed ( many browsers look down on self-signed certs ).
If you are going to work with OpenSSL CA you may need pkeytool to import private key into java keystore file.
您可以使用 Java keytool 创建自签名证书。它足以用于教育或测试目的,但如果您部署用它签名的代码,人们不太可能信任它。
我认为 Thawte 曾经提供免费的电子邮件签名证书,也可以用于签名代码。我不确定情况是否仍然如此。
You can create a self-signed certificate using the Java keytool. It's sufficient for educational or testing purposes, but if you deploy code signed with it, people are unlikely to trust it.
I think Thawte used to offer a free e-mail signing certificate that could also be used for signing code. I'm not sure if that is still the case.