java - OS X 10.8 Gatekeeper 和 Java 小程序

Question

在 OS X 10.8 的新版本中，当您尝试启动已签名的 Java 小程序时，Gatekeeper 将弹出以下警告:

小程序已使用有效的代码签名证书进行签名，并且可以在其他平台以及以前版本的 OS X 上正常工作。如果我将“允许从以下位置下载应用程序:”更改为“任何地方”，它可以正常工作。

据我所知，“无法验证数字签名”实际上是指“未使用 Mac 开发人员 ID 进行签名”。

那么:我可以使用 Mac 开发人员 ID 对 Java 小程序进行签名吗？我可以同时使用 Mac 开发人员 ID 和标准代码签名证书对其进行签名吗？有更好的方法吗？

Answer 1

这是我从 Apple 开发者技术支持那里得到的答案:

Thank you for your patience while we investigated this.

The alert is presented by Java, not by Gatekeeper. However, you're correct that the verification logic was changed on OS X Mountain Lion.

For a while now, users have been presented with this alert when running a signed applet, because signed applets can escape the Java sandbox and make unexpected changes to the user's system. Users have the option to check the "Allow all applets from " box if they trust the developer and thus they won't see the alert again unless they remove the item from the Java Security preferences.

What's changed in Mountain Lion is that the verification alert now basically means that the applet's signature is valid, but the applet is from an unidentified developer and is trying to escalate privileges when Gatekeeper is enabled and the user has to decide whether to allow that.

"Unidentified developer" means a source other than the Mac App Store or a Developer ID-identified developer. Note that Java applets cannot participate in the Developer ID program.

If Gatekeeper is set to trust only Mac App Store apps, then you will not be able to add the applet to the trusted list unless you add the applet's certificate to the keychain using the sheet that appears after clicking Show Details.

Unsigned applets are not allowed to escape the Java sandbox at all.

This is consistent with Gatekeeper's treatment of native Mac apps; apps from unidentified developers are not allowed to run by default.

If you'd like to see the wording of the alert changed, please file a bug report at https://developer.apple.com/bugreporter.

这基本上意味着没有办法以您可以避免显示此消息的方式对小程序进行签名。我向 Apple 提交了一份错误报告，说我希望将消息的措辞更改为不包含诸如 UNIDENTIFIED、UNVERIFIED、INSECURE 之类的词……因为这是签署小程序的全部意义，这样用户就可以感到温暖当他们需要允许小程序运行时，内部舒适，向他们保证他们将允许的内容是好的和经过验证的，并且不会对他们的计算机造成任何伤害，我们需要在它的地方展示它将是可见的，用它戳他们的眼睛。