Code signing certificates


#1

Hi,

Will it be possible to request , code (java, MS…) signing certificates

thx
patrik


#2

No, this is only for SSL web server.


#3

#4

Actually, it’s not only for web servers, but any TLS usage, so also POP or SMTP servers.


#5

well code signing requires a different level of trust and is usual bound to the natural or business entity and not just the domain, and therefore an automatic check isnt possible, meaning you wont get a code-signing so fast.


#6

For signing Java certifying domain ownership might be sufficient in many cases.
If the first non-empty package starts with de.frame4j, e.g., the author should own the domain frame4j.de use it for distributing the software and would mention that in the jar’s manifest as Implementation-URL, Codebase and Caller-Allowable-Codebase.


#7