Adobe AIR - 自签名应用程序可以吗？
我想使用 Adobe AIR 开发一个应用程序。但我必须使用代码签名证书对其进行签名。我不想购买代码签名证书。如果我使用自签名证书分发我的应用程序可以吗？
I want to develop an app using Adobe AIR. But I have to sign it using a code signing certificate. I don't wan to buy a code signing certificate. Would it be OK if I distribute my app with a self-signed certificate?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（3）
使用真实证书和自签名证书之间的唯一区别是用户在初始安装对话框中看到的内容。有了真正的认证，他们会看到一个黄色的“！”该应用程序将显示为“已知”来源，并且将显示您的公司名称。使用自签名证书时，会有一个红色的“？”，并且会显示该应用程序的发布者“未知”。您可以在此页面。
所以实际上，这取决于您是否同意人们在安装时看到可怕的警告。如果您仅将应用程序作为“使用风险自负”的方式提供，或者该应用程序将主要由一小群已经知道您是谁的人（例如，内部公司应用程序）使用，则可能不会是一个问题，但如果您希望随机的互联网用户使用您的应用程序并信任它，那么证书可能是一个好主意。
The only difference between using a real certificate and a self-signed certificate is what the user sees in the initial installation dialog. With a real certificated they'll see a yellow "!" and the app will shown to be of "KNOWN" origin, and your company name will be shown. With a self-signed cert, there will be a red "?", and it will say the app's publisher is "UNKNOWN". You can see samples of the two dialogs at the very bottom of this page.
So realistically, it comes down to whether you're okay with people seeing a scary warning at install time. If you're only offering up the apps as a "use at your own risk" thing, or the app will be used mainly by a small group of people who already know who you are (an internal company app, e.g.) that may not be an issue, but if you hope for random internet people to come use your app and trust it, a cert may be a good idea.
这取决于你对“OK”的定义，但很可能不是。
自签名证书不会由受信任的 CA 颁发，并且您的证书将被客户端视为不信任。我不认为（但尚未测试）用户会被主动阻止安装具有不受信任证书的应用程序，但他们至少会收到警告，并且这不会给您的用户对您的应用程序留下良好的第一印象。
如果只是为了您自己或一小群认识并信任您的人，那么自签名证书很可能不是问题，但如果您要将其分发给全世界，您几乎肯定会更喜欢合适的证书。
That depends on your definition of "OK", but most likely no.
A self-signed certificate will not have been issued by a trusted CA, and your certificate will be considered untrusted by the client. I don't think (but have not tested) that the user is actively prevented from installing an app with an untrusted certificate, but they would at least get a warning, and that doesn't give your user a good first impression of your app.
If it's just for yourself or for a small group of people who know and trust you, then a self-signed certificate is most likely not a problem, but if you're distributing it to the world, you will almost certainly prefer a proper certificate.
我最近考虑为公司开发一个 Air 应用程序以分发给客户。在 OSX Mavericks 上 - 在我的 mac 和设计师的 mac 上，会弹出一个红色警告标志，表明我们是未知发布者 - 这是使用自签名证书。整个安装过程很笨拙，我必须验证我们是否合法，因为这个警告标志推断我们想要秘密分发一些东西。
从营销角度来看，这看起来很糟糕。
除此之外，我还设法找到一个人来测试在 Windows 上使用自签名证书下载 Air 应用程序的整个过程，该人具有“平均”的 IT 技能，并且他们是这样说的：
“不，我没有下载它......它看起来像是想在我的计算机上放置病毒。” 这就是下载结束的地方。
目前，我们正在寻求对该应用程序获得一些信任印章以用于分发目的。
Verisign、Thawte 看起来很有趣，尽管成本很高。
http://www.symantec.com/code-signing/adobe-air
https://www.thawte.com/code-signing/
或阅读此页面了解更多信息信息
http://help.adobe.com/en_US/air/build/ WS5b3ccc516d4fbf351e63e3d118666ade46-7ff0.html
I have recently looked into developing an Air App for the company to distribute to customers. On OSX Mavericks - on my mac and my designer's mac a red warning signs pops up stating that we are an unknown publisher - This was using the self signed certificate. The whole process was clunky with the installation, I had to verify that we were legitimate, as this warning sign inferred we were a looking to distribute something underhand.
From a marketing perspective this looked terrible.
In addition to this I managed to find someone to test the whole process of downloading the air app with a self signed cert on windows with an 'average' amount IT skills and this is what they said:
"Nah I didn't download it... it looked like it wanted to put a virus on my computer." And that is where download ended.
Currently we are looking to get some seal of trust on the application for distribution purposes.
Verisign, Thawte look interesting, although costly.
http://www.symantec.com/code-signing/adobe-air
https://www.thawte.com/code-signing/
Or read this page for more information
http://help.adobe.com/en_US/air/build/WS5b3ccc516d4fbf351e63e3d118666ade46-7ff0.html