flex-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From OmPrakash Muppirala <bigosma...@gmail.com>
Subject Re: [DRAFT] Apache Flex SDK Installer 3.3.0 Released
Date Thu, 23 Nov 2017 19:40:26 GMT
Okay, looks like the certs have not expired:

PS C:\p\documents\certificates\apache> openssl pkcs12 -in
.\installapacheflex_self.p12 -out certificate.pem -nodes
Enter Import Password:
MAC verified OK
PS C:\p\documents\certificates\apache> cat certificate.pem | openssl x509
-noout -enddate
notAfter=Aug 30 08:43:51 2037 GMT

The only possibility now is that the previous versions were signed with a
different cert.  I guess we just need to add a note in the announce email
to uninstall the previous version, IFF there is a certificate error durring
installation.

Thanks,
Om

On Wed, Nov 22, 2017 at 11:47 PM, Piotr Zarzycki <piotrzarzycki21@gmail.com>
wrote:

> Om,
>
> Thanks for explanation. I sent you certificates.
>
> Piotr
>
> 2017-11-23 8:16 GMT+01:00 OmPrakash Muppirala <bigosmallm@gmail.com>:
>
> > On Nov 22, 2017 10:13 PM, "Piotr Zarzycki" <piotrzarzycki21@gmail.com>
> > wrote:
> >
> > Hi Om,
> >
> > I'm not sure what do you mean by checked previous version. I did check
> > Installer 3.2 and it not have such tab as Moonshine or Adobe Extension
> > Manager.
> >
> >
> > This is how I understand how all this works:
> >
> > I think Moonshine probably got a certificate from a trusted Certificate
> > Authority.  That way, the OS which probably already has the the root
> > certificate and can thus verify the validity of the Moonshine IDE.
> >
> > The certificate we use for signing the installer was a self created cert.
> > So, if you manually install the certificate, then the OS can verify the
> > signature of the Installer binary.
> >
> > In our case, there is a good chance that our certificate has expired.
> Can
> > you send it to me privately so I can try to check its validity?
> >
> > Thanks,
> > Om
> >
> >
> > Thanks, Piotr
> >
> > 2017-11-22 23:13 GMT+01:00 OmPrakash Muppirala <bigosmallm@gmail.com>:
> >
> > > On Wed, Nov 22, 2017 at 2:06 PM, Piotr Zarzycki <
> > piotrzarzycki21@gmail.com
> > > >
> > > wrote:
> > >
> > > > Om,
> > > >
> > > > Well I'm not so sure. I'm also not an expert in signing, but for
> > example
> > > > Moonshine have also some signing certs and I see that tab "Digital
> > > > Signature" after installation.
> > > >
> > > > Piotr
> > > >
> > > >
> > > >
> > > Have you checked the previous releases?
> > >
> > >
> > > >
> > > > 2017-11-22 23:02 GMT+01:00 OmPrakash Muppirala <bigosmallm@gmail.com
> >:
> > > >
> > > > > On Wed, Nov 22, 2017 at 12:51 PM, piotrz <
> piotrzarzycki21@gmail.com>
> > > > > wrote:
> > > > >
> > > > > > Guys,
> > > > > >
> > > > > > Something is totally wrong. I just installed Installer 3.2 and
> > check
> > > > > > whether
> > > > > > it has digital sign and it's not. For the comparison I've checked
> > > > "Adobe
> > > > > > Extension Manager CS6" and properties looks like that:
> > > > > >
> > > > > > <http://apache-flex-development.2333347.n4.nabble.
> > > > > > com/file/t740/installer_3.png>
> > > > > >
> > > > > > Piotr
> > > > > >
> > > > > >
> > > > > I think the signature is checked by the AIR runtime and not the
> > system.
> > > > > So, this makes sense.
> > > > >
> > > > > Thanks,
> > > > > Om
> > > > >
> > > > >
> > > > > >
> > > > > >
> > > > > > -----
> > > > > > Patreon: https://www.patreon.com/piotrzarzycki
> > > > > > --
> > > > > > Sent from: http://apache-flex-development.2333347.n4.nabble.com/
> > > > > >
> > > > >
> > > >
> > > >
> > > >
> > > > --
> > > >
> > > > Piotr Zarzycki
> > > >
> > > > Patreon: *https://www.patreon.com/piotrzarzycki
> > > > <https://www.patreon.com/piotrzarzycki>*
> > > >
> > >
> >
> >
> >
> > --
> >
> > Piotr Zarzycki
> >
> > Patreon: *https://www.patreon.com/piotrzarzycki
> > <https://www.patreon.com/piotrzarzycki>*
> >
>
>
>
> --
>
> Piotr Zarzycki
>
> Patreon: *https://www.patreon.com/piotrzarzycki
> <https://www.patreon.com/piotrzarzycki>*
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message