Is it allowed to be an Apple trusted developer with pure Java The 2019 Stack Overflow Developer Survey Results Are InJava developer planing to buy MacCan't open Java Preferences with Oracle Java 7 installedWhat is installed with Java 7?Can I deploy Retina with any JAVA version at all?Where is java? Java Control Pannel has disabled “View” button and Terminal still response with “No Java runtime present, requesting install”Java issue with osx…installed latest but java apps not workingHow to start SQL Developer with the correct Java Version?Uninstalling Java 6 to replace with Java 8Problem with installing JavaInstall Jira: issue with java JDK
Is this app Icon Browser Safe/Legit?
Delete all lines which don't have n characters before delimiter
What could be the right powersource for 15 seconds lifespan disposable giant chainsaw?
What is the meaning of the verb "bear" in this context?
The difference between dialogue marks
Are there incongruent pythagorean triangles with the same perimeter and same area?
Origin of "cooter" meaning "vagina"
Do these rules for Critical Successes and Critical Failures seem fair?
Can you compress metal and what would be the consequences?
Why do UK politicians seemingly ignore opinion polls on Brexit?
A poker game description that does not feel gimmicky
How to manage monthly salary
Why isn't airport relocation done gradually?
Have you ever entered Singapore using a different passport or name?
Does a dangling wire really electrocute me if I'm standing in water?
How can I autofill dates in Excel excluding Sunday?
Did Section 31 appear in Star Trek: The Next Generation?
Why do we hear so much about the Trump administration deciding to impose and then remove tariffs?
What is the meaning of Triage in Cybersec world?
Should I use my personal e-mail address, or my workplace one, when registering to external websites for work purposes?
Can a flute soloist sit?
What do hard-Brexiteers want with respect to the Irish border?
When should I buy a clipper card after flying to OAK?
Why isn't the circumferential light around the M87 black hole's event horizon symmetric?
Is it allowed to be an Apple trusted developer with pure Java
The 2019 Stack Overflow Developer Survey Results Are InJava developer planing to buy MacCan't open Java Preferences with Oracle Java 7 installedWhat is installed with Java 7?Can I deploy Retina with any JAVA version at all?Where is java? Java Control Pannel has disabled “View” button and Terminal still response with “No Java runtime present, requesting install”Java issue with osx…installed latest but java apps not workingHow to start SQL Developer with the correct Java Version?Uninstalling Java 6 to replace with Java 8Problem with installing JavaInstall Jira: issue with java JDK
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty margin-bottom:0;
I am developing JavaFX with Spring applications that are shipped with native installers for Windows, Linux and macOS. I am hosting the macOS DMG and pkg installers outside Mac App Store on my web site.
When I download and attempt to install a DMG on my macOS Mojave, the latter forbids to install because the app is not from a trusted Apple developer. Downloading the same installer from FTP is allowed by Mac to be installed.
My question is - Can I have my package installer signed (by registering as an Apple developer) if the application is purely Java and has nothing to do with Apple specific SDKs?
macos install java gatekeeper
add a comment |
I am developing JavaFX with Spring applications that are shipped with native installers for Windows, Linux and macOS. I am hosting the macOS DMG and pkg installers outside Mac App Store on my web site.
When I download and attempt to install a DMG on my macOS Mojave, the latter forbids to install because the app is not from a trusted Apple developer. Downloading the same installer from FTP is allowed by Mac to be installed.
My question is - Can I have my package installer signed (by registering as an Apple developer) if the application is purely Java and has nothing to do with Apple specific SDKs?
macos install java gatekeeper
add a comment |
I am developing JavaFX with Spring applications that are shipped with native installers for Windows, Linux and macOS. I am hosting the macOS DMG and pkg installers outside Mac App Store on my web site.
When I download and attempt to install a DMG on my macOS Mojave, the latter forbids to install because the app is not from a trusted Apple developer. Downloading the same installer from FTP is allowed by Mac to be installed.
My question is - Can I have my package installer signed (by registering as an Apple developer) if the application is purely Java and has nothing to do with Apple specific SDKs?
macos install java gatekeeper
I am developing JavaFX with Spring applications that are shipped with native installers for Windows, Linux and macOS. I am hosting the macOS DMG and pkg installers outside Mac App Store on my web site.
When I download and attempt to install a DMG on my macOS Mojave, the latter forbids to install because the app is not from a trusted Apple developer. Downloading the same installer from FTP is allowed by Mac to be installed.
My question is - Can I have my package installer signed (by registering as an Apple developer) if the application is purely Java and has nothing to do with Apple specific SDKs?
macos install java gatekeeper
macos install java gatekeeper
edited Mar 30 at 13:28
Nimesh Neema
16.7k74879
16.7k74879
asked Mar 30 at 12:49
BrankoBranko
111
111
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
Basically if I understand your question - yes, it’s allowed, but might not be required.
When you pay to be a developer, Apple generates a secure certificate you can use for many functions - one of which is to code sign a folder of files. Applications on macOS are just bundles of files with some conventions which files make something a package or an app. You can sign a script, package, interpreted code bundle or a compiled app.
- https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution
Apple is offering additional items like notarizing an app but you should be able to sign your example app with a self-generated certificate before you pay for Apple to sign / provide your identity that all of their devices and OS will trust as valid.
- https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution
To recap, you pay for an identity that Apple validates. Of course if you abuse this, your certificate can and should be revoked but as long as you are signing legitimate apps you should expect to only have to pay annually for a renewal of your certificate. This is pretty much analogous to getting an SSL cert. You pay for those periodically, and then the signer generally doesn’t care why / where you install that cert - as long as you don’t break their rules and get caught, they don’t revoke your certificate.
Now - if the java executable gets notarized and signed by someone else, you might not need this at all and you’re not embedding executable bits and just resources and text or source code. For example, it doesn’t make sense to pay if you write swift scripts or python scripts or bash (or other shell) scripts. That would be like code signing a word doc and not word the program itself.
Thanks. I shall give it a try becoming an Apple developer.
– Branko
Mar 30 at 23:24
add a comment |
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Basically if I understand your question - yes, it’s allowed, but might not be required.
When you pay to be a developer, Apple generates a secure certificate you can use for many functions - one of which is to code sign a folder of files. Applications on macOS are just bundles of files with some conventions which files make something a package or an app. You can sign a script, package, interpreted code bundle or a compiled app.
- https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution
Apple is offering additional items like notarizing an app but you should be able to sign your example app with a self-generated certificate before you pay for Apple to sign / provide your identity that all of their devices and OS will trust as valid.
- https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution
To recap, you pay for an identity that Apple validates. Of course if you abuse this, your certificate can and should be revoked but as long as you are signing legitimate apps you should expect to only have to pay annually for a renewal of your certificate. This is pretty much analogous to getting an SSL cert. You pay for those periodically, and then the signer generally doesn’t care why / where you install that cert - as long as you don’t break their rules and get caught, they don’t revoke your certificate.
Now - if the java executable gets notarized and signed by someone else, you might not need this at all and you’re not embedding executable bits and just resources and text or source code. For example, it doesn’t make sense to pay if you write swift scripts or python scripts or bash (or other shell) scripts. That would be like code signing a word doc and not word the program itself.
Thanks. I shall give it a try becoming an Apple developer.
– Branko
Mar 30 at 23:24
add a comment |
Basically if I understand your question - yes, it’s allowed, but might not be required.
When you pay to be a developer, Apple generates a secure certificate you can use for many functions - one of which is to code sign a folder of files. Applications on macOS are just bundles of files with some conventions which files make something a package or an app. You can sign a script, package, interpreted code bundle or a compiled app.
- https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution
Apple is offering additional items like notarizing an app but you should be able to sign your example app with a self-generated certificate before you pay for Apple to sign / provide your identity that all of their devices and OS will trust as valid.
- https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution
To recap, you pay for an identity that Apple validates. Of course if you abuse this, your certificate can and should be revoked but as long as you are signing legitimate apps you should expect to only have to pay annually for a renewal of your certificate. This is pretty much analogous to getting an SSL cert. You pay for those periodically, and then the signer generally doesn’t care why / where you install that cert - as long as you don’t break their rules and get caught, they don’t revoke your certificate.
Now - if the java executable gets notarized and signed by someone else, you might not need this at all and you’re not embedding executable bits and just resources and text or source code. For example, it doesn’t make sense to pay if you write swift scripts or python scripts or bash (or other shell) scripts. That would be like code signing a word doc and not word the program itself.
Thanks. I shall give it a try becoming an Apple developer.
– Branko
Mar 30 at 23:24
add a comment |
Basically if I understand your question - yes, it’s allowed, but might not be required.
When you pay to be a developer, Apple generates a secure certificate you can use for many functions - one of which is to code sign a folder of files. Applications on macOS are just bundles of files with some conventions which files make something a package or an app. You can sign a script, package, interpreted code bundle or a compiled app.
- https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution
Apple is offering additional items like notarizing an app but you should be able to sign your example app with a self-generated certificate before you pay for Apple to sign / provide your identity that all of their devices and OS will trust as valid.
- https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution
To recap, you pay for an identity that Apple validates. Of course if you abuse this, your certificate can and should be revoked but as long as you are signing legitimate apps you should expect to only have to pay annually for a renewal of your certificate. This is pretty much analogous to getting an SSL cert. You pay for those periodically, and then the signer generally doesn’t care why / where you install that cert - as long as you don’t break their rules and get caught, they don’t revoke your certificate.
Now - if the java executable gets notarized and signed by someone else, you might not need this at all and you’re not embedding executable bits and just resources and text or source code. For example, it doesn’t make sense to pay if you write swift scripts or python scripts or bash (or other shell) scripts. That would be like code signing a word doc and not word the program itself.
Basically if I understand your question - yes, it’s allowed, but might not be required.
When you pay to be a developer, Apple generates a secure certificate you can use for many functions - one of which is to code sign a folder of files. Applications on macOS are just bundles of files with some conventions which files make something a package or an app. You can sign a script, package, interpreted code bundle or a compiled app.
- https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution
Apple is offering additional items like notarizing an app but you should be able to sign your example app with a self-generated certificate before you pay for Apple to sign / provide your identity that all of their devices and OS will trust as valid.
- https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution
To recap, you pay for an identity that Apple validates. Of course if you abuse this, your certificate can and should be revoked but as long as you are signing legitimate apps you should expect to only have to pay annually for a renewal of your certificate. This is pretty much analogous to getting an SSL cert. You pay for those periodically, and then the signer generally doesn’t care why / where you install that cert - as long as you don’t break their rules and get caught, they don’t revoke your certificate.
Now - if the java executable gets notarized and signed by someone else, you might not need this at all and you’re not embedding executable bits and just resources and text or source code. For example, it doesn’t make sense to pay if you write swift scripts or python scripts or bash (or other shell) scripts. That would be like code signing a word doc and not word the program itself.
edited Mar 30 at 15:27
answered Mar 30 at 13:00
bmike♦bmike
162k46290629
162k46290629
Thanks. I shall give it a try becoming an Apple developer.
– Branko
Mar 30 at 23:24
add a comment |
Thanks. I shall give it a try becoming an Apple developer.
– Branko
Mar 30 at 23:24
Thanks. I shall give it a try becoming an Apple developer.
– Branko
Mar 30 at 23:24
Thanks. I shall give it a try becoming an Apple developer.
– Branko
Mar 30 at 23:24
add a comment |