Link to home
Start Free TrialLog in
Avatar of pofpof98
pofpof98

asked on

which certificate provider

Hi

My java application needs to be signed because it requires full access to the user's machine.

I have a looked at verisign or thawte but very pricee and my product is non commercial.

Is there anything for freeware ?

regs

pofpopf
Avatar of bloodredsun
bloodredsun
Flag of Australia image

Only a self-signed certificate, but I don't know how many people will trust it and I'm sure it will cause other issues.
Check here for how-to for an applet  http://personal.vsnl.com/sureshms/javasign1.html
>>but I don't know how many people will trust it

Sometimes i wonder if it really makes much difference: having to accept a trusted one is scary in itself and really the important thing may be 'they know where you live' after you've trashed their system ;-)
(Of course an untrusted one looks cheapskate though ;-))
>>looks cheapskate though...
Yep :-)

Tthis is why  pofpof98 should bite the bullet and get a Thawte or Verisign rather than an unusual cheaper one (http://www.geotrust.com/web_security/index.htm , http://www.rapidssl.com/starterssl/starterssl.html) and then ask for donations to pay for things like hosting, bandwidth and certificates.
Avatar of aozarov
aozarov

IS your application an Applet or JNLP application?
For standard applicaiton there is no need to sign your code to gain full access to the machine (though you can still do it).
If ur application is running in Weblogic, u can generate ur own self-signed certificate. It's also same like ur verisign or thawte  certificates
>> u can generate ur own self-signed certificate
that's pretty much what I said in the fist post and you can do it with using the second link :-)
ASKER CERTIFIED SOLUTION
Avatar of Madhavan Sundarraj
Madhavan Sundarraj
Flag of Saudi Arabia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
>>  you can do it with using the second link

I checked the link, the steps are explained to create Signed Applets. It's used to restrict code in client machine not application ;)

Signed Applets is not a concept of Public-private key crypto concept