Is it allowed to be an Apple trusted developer with pure Java The 2019 Stack Overflow Developer Survey Results Are InJava developer planing to buy MacCan't open Java Preferences with Oracle Java 7 installedWhat is installed with Java 7?Can I deploy Retina with any JAVA version at all?Where is java? Java Control Pannel has disabled “View” button and Terminal still response with “No Java runtime present, requesting install”Java issue with osx…installed latest but java apps not workingHow to start SQL Developer with the correct Java Version?Uninstalling Java 6 to replace with Java 8Problem with installing JavaInstall Jira: issue with java JDK
What spell level should this homebrew After-Image spell be?
Monty Hall variation
What would happen to a Neanderthal today?
Geography at the pixel level
Operational amplifier basics
Is an up-to-date browser secure on an out-of-date OS?
Potential by Assembling Charges
Landlord wants to switch my lease to a "Land contract" to "get back at the city"
Why do UK politicians seemingly ignore opinion polls on Brexit?
Why can Shazam fly?
Did Section 31 appear in Star Trek: The Next Generation?
Inflated grade on resume at previous job, might former employer tell new employer?
Why is Grand Jury testimony secret?
Lethal sonic weapons
How is radar separation assured between primary and secondary targets?
Return to UK after being refused entry years previously
What do the Banks children have against barley water?
What is the meaning of Triage in Cybersec world?
Is bread bad for ducks?
Why do some words that are not inflected have an umlaut?
Is it idiomatic to use a noun as the apparent subject of a first person plural?
"as much details as you can remember"
Process LaTeX code only if package is loaded
A poker game description that does not feel gimmicky
Is it allowed to be an Apple trusted developer with pure Java
The 2019 Stack Overflow Developer Survey Results Are InJava developer planing to buy MacCan't open Java Preferences with Oracle Java 7 installedWhat is installed with Java 7?Can I deploy Retina with any JAVA version at all?Where is java? Java Control Pannel has disabled “View” button and Terminal still response with “No Java runtime present, requesting install”Java issue with osx…installed latest but java apps not workingHow to start SQL Developer with the correct Java Version?Uninstalling Java 6 to replace with Java 8Problem with installing JavaInstall Jira: issue with java JDK
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty margin-bottom:0;
I am developing JavaFX with Spring applications that are shipped with native installers for Windows, Linux and macOS. I am hosting the macOS DMG and pkg installers outside Mac App Store on my web site.
When I download and attempt to install a DMG on my macOS Mojave, the latter forbids to install because the app is not from a trusted Apple developer. Downloading the same installer from FTP is allowed by Mac to be installed.
My question is - Can I have my package installer signed (by registering as an Apple developer) if the application is purely Java and has nothing to do with Apple specific SDKs?
macos install java gatekeeper
add a comment |
I am developing JavaFX with Spring applications that are shipped with native installers for Windows, Linux and macOS. I am hosting the macOS DMG and pkg installers outside Mac App Store on my web site.
When I download and attempt to install a DMG on my macOS Mojave, the latter forbids to install because the app is not from a trusted Apple developer. Downloading the same installer from FTP is allowed by Mac to be installed.
My question is - Can I have my package installer signed (by registering as an Apple developer) if the application is purely Java and has nothing to do with Apple specific SDKs?
macos install java gatekeeper
add a comment |
I am developing JavaFX with Spring applications that are shipped with native installers for Windows, Linux and macOS. I am hosting the macOS DMG and pkg installers outside Mac App Store on my web site.
When I download and attempt to install a DMG on my macOS Mojave, the latter forbids to install because the app is not from a trusted Apple developer. Downloading the same installer from FTP is allowed by Mac to be installed.
My question is - Can I have my package installer signed (by registering as an Apple developer) if the application is purely Java and has nothing to do with Apple specific SDKs?
macos install java gatekeeper
I am developing JavaFX with Spring applications that are shipped with native installers for Windows, Linux and macOS. I am hosting the macOS DMG and pkg installers outside Mac App Store on my web site.
When I download and attempt to install a DMG on my macOS Mojave, the latter forbids to install because the app is not from a trusted Apple developer. Downloading the same installer from FTP is allowed by Mac to be installed.
My question is - Can I have my package installer signed (by registering as an Apple developer) if the application is purely Java and has nothing to do with Apple specific SDKs?
macos install java gatekeeper
macos install java gatekeeper
edited Mar 30 at 13:28
Nimesh Neema
16.7k74879
16.7k74879
asked Mar 30 at 12:49
BrankoBranko
111
111
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
Basically if I understand your question - yes, it’s allowed, but might not be required.
When you pay to be a developer, Apple generates a secure certificate you can use for many functions - one of which is to code sign a folder of files. Applications on macOS are just bundles of files with some conventions which files make something a package or an app. You can sign a script, package, interpreted code bundle or a compiled app.
- https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution
Apple is offering additional items like notarizing an app but you should be able to sign your example app with a self-generated certificate before you pay for Apple to sign / provide your identity that all of their devices and OS will trust as valid.
- https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution
To recap, you pay for an identity that Apple validates. Of course if you abuse this, your certificate can and should be revoked but as long as you are signing legitimate apps you should expect to only have to pay annually for a renewal of your certificate. This is pretty much analogous to getting an SSL cert. You pay for those periodically, and then the signer generally doesn’t care why / where you install that cert - as long as you don’t break their rules and get caught, they don’t revoke your certificate.
Now - if the java executable gets notarized and signed by someone else, you might not need this at all and you’re not embedding executable bits and just resources and text or source code. For example, it doesn’t make sense to pay if you write swift scripts or python scripts or bash (or other shell) scripts. That would be like code signing a word doc and not word the program itself.
Thanks. I shall give it a try becoming an Apple developer.
– Branko
Mar 30 at 23:24
add a comment |
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Basically if I understand your question - yes, it’s allowed, but might not be required.
When you pay to be a developer, Apple generates a secure certificate you can use for many functions - one of which is to code sign a folder of files. Applications on macOS are just bundles of files with some conventions which files make something a package or an app. You can sign a script, package, interpreted code bundle or a compiled app.
- https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution
Apple is offering additional items like notarizing an app but you should be able to sign your example app with a self-generated certificate before you pay for Apple to sign / provide your identity that all of their devices and OS will trust as valid.
- https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution
To recap, you pay for an identity that Apple validates. Of course if you abuse this, your certificate can and should be revoked but as long as you are signing legitimate apps you should expect to only have to pay annually for a renewal of your certificate. This is pretty much analogous to getting an SSL cert. You pay for those periodically, and then the signer generally doesn’t care why / where you install that cert - as long as you don’t break their rules and get caught, they don’t revoke your certificate.
Now - if the java executable gets notarized and signed by someone else, you might not need this at all and you’re not embedding executable bits and just resources and text or source code. For example, it doesn’t make sense to pay if you write swift scripts or python scripts or bash (or other shell) scripts. That would be like code signing a word doc and not word the program itself.
Thanks. I shall give it a try becoming an Apple developer.
– Branko
Mar 30 at 23:24
add a comment |
Basically if I understand your question - yes, it’s allowed, but might not be required.
When you pay to be a developer, Apple generates a secure certificate you can use for many functions - one of which is to code sign a folder of files. Applications on macOS are just bundles of files with some conventions which files make something a package or an app. You can sign a script, package, interpreted code bundle or a compiled app.
- https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution
Apple is offering additional items like notarizing an app but you should be able to sign your example app with a self-generated certificate before you pay for Apple to sign / provide your identity that all of their devices and OS will trust as valid.
- https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution
To recap, you pay for an identity that Apple validates. Of course if you abuse this, your certificate can and should be revoked but as long as you are signing legitimate apps you should expect to only have to pay annually for a renewal of your certificate. This is pretty much analogous to getting an SSL cert. You pay for those periodically, and then the signer generally doesn’t care why / where you install that cert - as long as you don’t break their rules and get caught, they don’t revoke your certificate.
Now - if the java executable gets notarized and signed by someone else, you might not need this at all and you’re not embedding executable bits and just resources and text or source code. For example, it doesn’t make sense to pay if you write swift scripts or python scripts or bash (or other shell) scripts. That would be like code signing a word doc and not word the program itself.
Thanks. I shall give it a try becoming an Apple developer.
– Branko
Mar 30 at 23:24
add a comment |
Basically if I understand your question - yes, it’s allowed, but might not be required.
When you pay to be a developer, Apple generates a secure certificate you can use for many functions - one of which is to code sign a folder of files. Applications on macOS are just bundles of files with some conventions which files make something a package or an app. You can sign a script, package, interpreted code bundle or a compiled app.
- https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution
Apple is offering additional items like notarizing an app but you should be able to sign your example app with a self-generated certificate before you pay for Apple to sign / provide your identity that all of their devices and OS will trust as valid.
- https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution
To recap, you pay for an identity that Apple validates. Of course if you abuse this, your certificate can and should be revoked but as long as you are signing legitimate apps you should expect to only have to pay annually for a renewal of your certificate. This is pretty much analogous to getting an SSL cert. You pay for those periodically, and then the signer generally doesn’t care why / where you install that cert - as long as you don’t break their rules and get caught, they don’t revoke your certificate.
Now - if the java executable gets notarized and signed by someone else, you might not need this at all and you’re not embedding executable bits and just resources and text or source code. For example, it doesn’t make sense to pay if you write swift scripts or python scripts or bash (or other shell) scripts. That would be like code signing a word doc and not word the program itself.
Basically if I understand your question - yes, it’s allowed, but might not be required.
When you pay to be a developer, Apple generates a secure certificate you can use for many functions - one of which is to code sign a folder of files. Applications on macOS are just bundles of files with some conventions which files make something a package or an app. You can sign a script, package, interpreted code bundle or a compiled app.
- https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution
Apple is offering additional items like notarizing an app but you should be able to sign your example app with a self-generated certificate before you pay for Apple to sign / provide your identity that all of their devices and OS will trust as valid.
- https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution
To recap, you pay for an identity that Apple validates. Of course if you abuse this, your certificate can and should be revoked but as long as you are signing legitimate apps you should expect to only have to pay annually for a renewal of your certificate. This is pretty much analogous to getting an SSL cert. You pay for those periodically, and then the signer generally doesn’t care why / where you install that cert - as long as you don’t break their rules and get caught, they don’t revoke your certificate.
Now - if the java executable gets notarized and signed by someone else, you might not need this at all and you’re not embedding executable bits and just resources and text or source code. For example, it doesn’t make sense to pay if you write swift scripts or python scripts or bash (or other shell) scripts. That would be like code signing a word doc and not word the program itself.
edited Mar 30 at 15:27
answered Mar 30 at 13:00
bmike♦bmike
161k46290629
161k46290629
Thanks. I shall give it a try becoming an Apple developer.
– Branko
Mar 30 at 23:24
add a comment |
Thanks. I shall give it a try becoming an Apple developer.
– Branko
Mar 30 at 23:24
Thanks. I shall give it a try becoming an Apple developer.
– Branko
Mar 30 at 23:24
Thanks. I shall give it a try becoming an Apple developer.
– Branko
Mar 30 at 23:24
add a comment |