We closed this forum 18 June 2010. It has served us well since 2005 as the ALPHA forum did before it from 2002 to 2005. New discussions are ongoing at the new URL http://forum.processing.org. You'll need to sign up and get a new user account. We're sorry about that inconvenience, but we think it's better in the long run. The content on this forum will remain online.
Index › Programming Questions & Help › Integration › current state of signing applets
‹ Previous Topic | Next Topic ›
Page Index Toggle Pages: 1
current state of signing applets (Read 1677 times)
sonic
current state of signing applets
Oct 15th, 2009, 8:10am  
I'm not completely sure this is the best place to ask this, but it does seem like an integration issue. I've read through the hack for singing applets:

http://processing.org/hacks/hacks:signapplet

but it's not clear to me if I need to sign all 17 jar files that are created when I export, if this is an up-to-date method, or what complications could ensue from following it. I'd like to get rid of the annoying security popup, but as I say, it's not clear to me just how straight-forward it is.
Back to top
 
 
PhiLho 
Re: current state of signing applets
Reply #1 - Oct 15th, 2009, 9:21am  
17 jar files? You sure use lot of libraries at once!

It is as up to date as it can get, AFAIK, the procedure hasn't changed a lot.
You can't get rid of the security pop-up: they are annoying, but at least they warn the user of what is going on with this applet.
And I don't have the answer about signing all the jars, but I think you should probably sign at least the libraries accessing file system, foreign Web sites, accessing clipboard, etc. A pure graphical library might not need to be signed.
Back to top
 
WWW  
sonic
Re: current state of signing applets
Reply #2 - Oct 15th, 2009, 10:31am  
This is the list of jar files, PhiLho:

core.jar
gluegen-rt-natives-linux-amd64.jar
gluegen-rt-natives-linux-i586.jar
gluegen-rt-natives-macosx-ppc.jar
gluegen-rt-natives-macosx-universal.jar
gluegen-rt-natives-windows-amd64.jar
gluegen-rt-natives-windows-i586.jar
gluegen-rt.jar
jogl-natives-linux-amd64.jar
jogl-natives-linux-i586.jar
jogl-natives-macosx-ppc.jar
jogl-natives-macosx-universal.jar
jogl-natives-windows-amd64.jar
jogl-natives-windows-i586.jar
jogl.jar
mCP6_1seed_2_bezier.jar
opengl.jar
Back to top
 
 
PhiLho 
Re: current state of signing applets
Reply #3 - Oct 15th, 2009, 12:24pm  
Aren't the OpenGL jars already signed?
Back to top
 
WWW  
sonic
Re: current state of signing applets
Reply #4 - Oct 16th, 2009, 11:44am  
I don't know, PhiLho - how would I find out??
Back to top
 
 
PhiLho 
Re: current state of signing applets
Reply #5 - Oct 17th, 2009, 7:30am  
Open it with an archive manager like 7-Zip.
In the META-INF folder, you have a MANIFEST.MF file. Open it, it should have lot of lines starting with SHA1-Digest.
There is also in the same folder a file xxx.DSA or xxx.RSA, and a file xxx.SF
If you find these, the file is signed.

I looked at a couple of the OpenGL files shipped with Processing (the gluegen-xxx and jogl-xxx files) and they are indeed already signed.
Back to top
 
WWW  
Page Index Toggle Pages: 1
‹ Previous Topic | Next Topic ›