Is it allowed to be an Apple trusted developer with pure JavaJava developer planing to buy MacCan't open Java Preferences with Oracle Java 7 installedWhat is installed with Java 7?Can I deploy Retina with any JAVA version at all?Where is java? Java Control Pannel has disabled “View” button and Terminal still response with “No Java runtime present, requesting install”Java issue with osx…installed latest but java apps not workingHow to start SQL Developer with the correct Java Version?Uninstalling Java 6 to replace with Java 8Problem with installing JavaInstall Jira: issue with java JDK

Nominativ or Akkusativ

Verb "geeitet" in an old scientific text

How does this change to the opportunity attack rule impact combat?

Using column size much larger than necessary

Introducing Gladys, an intrepid globetrotter

Why is Arya visibly scared in the library in Game of Thrones S8E3?

Should I replace my bicycle tires if they have not been inflated in multiple years

Is there an official reason for not adding a post-credits scene?

Multiple SQL versions with Docker

What was the design of the Macintosh II's MMU replacement?

What was the first sci-fi story to feature the plot "the humans were the monsters all along"?

Building a list of products from the elements in another list

How can I close a gap between my fence and my neighbor's that's on his side of the property line?

Validation rule Scheduled Apex

PN junction band gap - equal across all devices?

Purpose of のは in this sentence?

Which module had more 'comfort' in terms of living space, the Lunar Module or the Command module?

What does this colon mean? It is not labeling, it is not ternary operator

What matters more when it comes to book covers? Is it ‘professional quality’ or relevancy?

As matter approaches a black hole, does it speed up?

How do I inject UserInterface into Access Control?

In Russian, how do you idiomatically express the idea of the figurative "overnight"?

Pressure inside an infinite ocean?

Analysis of count data with percentages



Is it allowed to be an Apple trusted developer with pure Java


Java developer planing to buy MacCan't open Java Preferences with Oracle Java 7 installedWhat is installed with Java 7?Can I deploy Retina with any JAVA version at all?Where is java? Java Control Pannel has disabled “View” button and Terminal still response with “No Java runtime present, requesting install”Java issue with osx…installed latest but java apps not workingHow to start SQL Developer with the correct Java Version?Uninstalling Java 6 to replace with Java 8Problem with installing JavaInstall Jira: issue with java JDK






.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty margin-bottom:0;








2















I am developing JavaFX with Spring applications that are shipped with native installers for Windows, Linux and macOS. I am hosting the macOS DMG and pkg installers outside Mac App Store on my web site.



When I download and attempt to install a DMG on my macOS Mojave, the latter forbids to install because the app is not from a trusted Apple developer. Downloading the same installer from FTP is allowed by Mac to be installed.



My question is - Can I have my package installer signed (by registering as an Apple developer) if the application is purely Java and has nothing to do with Apple specific SDKs?










share|improve this question






























    2















    I am developing JavaFX with Spring applications that are shipped with native installers for Windows, Linux and macOS. I am hosting the macOS DMG and pkg installers outside Mac App Store on my web site.



    When I download and attempt to install a DMG on my macOS Mojave, the latter forbids to install because the app is not from a trusted Apple developer. Downloading the same installer from FTP is allowed by Mac to be installed.



    My question is - Can I have my package installer signed (by registering as an Apple developer) if the application is purely Java and has nothing to do with Apple specific SDKs?










    share|improve this question


























      2












      2








      2








      I am developing JavaFX with Spring applications that are shipped with native installers for Windows, Linux and macOS. I am hosting the macOS DMG and pkg installers outside Mac App Store on my web site.



      When I download and attempt to install a DMG on my macOS Mojave, the latter forbids to install because the app is not from a trusted Apple developer. Downloading the same installer from FTP is allowed by Mac to be installed.



      My question is - Can I have my package installer signed (by registering as an Apple developer) if the application is purely Java and has nothing to do with Apple specific SDKs?










      share|improve this question
















      I am developing JavaFX with Spring applications that are shipped with native installers for Windows, Linux and macOS. I am hosting the macOS DMG and pkg installers outside Mac App Store on my web site.



      When I download and attempt to install a DMG on my macOS Mojave, the latter forbids to install because the app is not from a trusted Apple developer. Downloading the same installer from FTP is allowed by Mac to be installed.



      My question is - Can I have my package installer signed (by registering as an Apple developer) if the application is purely Java and has nothing to do with Apple specific SDKs?







      macos install java gatekeeper






      share|improve this question















      share|improve this question













      share|improve this question




      share|improve this question








      edited Mar 30 at 13:28









      Nimesh Neema

      18.4k75081




      18.4k75081










      asked Mar 30 at 12:49









      BrankoBranko

      111




      111




















          1 Answer
          1






          active

          oldest

          votes


















          2














          Basically if I understand your question - yes, it’s allowed, but might not be required.



          When you pay to be a developer, Apple generates a secure certificate you can use for many functions - one of which is to code sign a folder of files. Applications on macOS are just bundles of files with some conventions which files make something a package or an app. You can sign a script, package, interpreted code bundle or a compiled app.



          • https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution

          Apple is offering additional items like notarizing an app but you should be able to sign your example app with a self-generated certificate before you pay for Apple to sign / provide your identity that all of their devices and OS will trust as valid.



          • https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution

          To recap, you pay for an identity that Apple validates. Of course if you abuse this, your certificate can and should be revoked but as long as you are signing legitimate apps you should expect to only have to pay annually for a renewal of your certificate. This is pretty much analogous to getting an SSL cert. You pay for those periodically, and then the signer generally doesn’t care why / where you install that cert - as long as you don’t break their rules and get caught, they don’t revoke your certificate.



          Now - if the java executable gets notarized and signed by someone else, you might not need this at all and you’re not embedding executable bits and just resources and text or source code. For example, it doesn’t make sense to pay if you write swift scripts or python scripts or bash (or other shell) scripts. That would be like code signing a word doc and not word the program itself.






          share|improve this answer

























          • Thanks. I shall give it a try becoming an Apple developer.

            – Branko
            Mar 30 at 23:24


















          1 Answer
          1






          active

          oldest

          votes








          1 Answer
          1






          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes









          2














          Basically if I understand your question - yes, it’s allowed, but might not be required.



          When you pay to be a developer, Apple generates a secure certificate you can use for many functions - one of which is to code sign a folder of files. Applications on macOS are just bundles of files with some conventions which files make something a package or an app. You can sign a script, package, interpreted code bundle or a compiled app.



          • https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution

          Apple is offering additional items like notarizing an app but you should be able to sign your example app with a self-generated certificate before you pay for Apple to sign / provide your identity that all of their devices and OS will trust as valid.



          • https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution

          To recap, you pay for an identity that Apple validates. Of course if you abuse this, your certificate can and should be revoked but as long as you are signing legitimate apps you should expect to only have to pay annually for a renewal of your certificate. This is pretty much analogous to getting an SSL cert. You pay for those periodically, and then the signer generally doesn’t care why / where you install that cert - as long as you don’t break their rules and get caught, they don’t revoke your certificate.



          Now - if the java executable gets notarized and signed by someone else, you might not need this at all and you’re not embedding executable bits and just resources and text or source code. For example, it doesn’t make sense to pay if you write swift scripts or python scripts or bash (or other shell) scripts. That would be like code signing a word doc and not word the program itself.






          share|improve this answer

























          • Thanks. I shall give it a try becoming an Apple developer.

            – Branko
            Mar 30 at 23:24















          2














          Basically if I understand your question - yes, it’s allowed, but might not be required.



          When you pay to be a developer, Apple generates a secure certificate you can use for many functions - one of which is to code sign a folder of files. Applications on macOS are just bundles of files with some conventions which files make something a package or an app. You can sign a script, package, interpreted code bundle or a compiled app.



          • https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution

          Apple is offering additional items like notarizing an app but you should be able to sign your example app with a self-generated certificate before you pay for Apple to sign / provide your identity that all of their devices and OS will trust as valid.



          • https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution

          To recap, you pay for an identity that Apple validates. Of course if you abuse this, your certificate can and should be revoked but as long as you are signing legitimate apps you should expect to only have to pay annually for a renewal of your certificate. This is pretty much analogous to getting an SSL cert. You pay for those periodically, and then the signer generally doesn’t care why / where you install that cert - as long as you don’t break their rules and get caught, they don’t revoke your certificate.



          Now - if the java executable gets notarized and signed by someone else, you might not need this at all and you’re not embedding executable bits and just resources and text or source code. For example, it doesn’t make sense to pay if you write swift scripts or python scripts or bash (or other shell) scripts. That would be like code signing a word doc and not word the program itself.






          share|improve this answer

























          • Thanks. I shall give it a try becoming an Apple developer.

            – Branko
            Mar 30 at 23:24













          2












          2








          2







          Basically if I understand your question - yes, it’s allowed, but might not be required.



          When you pay to be a developer, Apple generates a secure certificate you can use for many functions - one of which is to code sign a folder of files. Applications on macOS are just bundles of files with some conventions which files make something a package or an app. You can sign a script, package, interpreted code bundle or a compiled app.



          • https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution

          Apple is offering additional items like notarizing an app but you should be able to sign your example app with a self-generated certificate before you pay for Apple to sign / provide your identity that all of their devices and OS will trust as valid.



          • https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution

          To recap, you pay for an identity that Apple validates. Of course if you abuse this, your certificate can and should be revoked but as long as you are signing legitimate apps you should expect to only have to pay annually for a renewal of your certificate. This is pretty much analogous to getting an SSL cert. You pay for those periodically, and then the signer generally doesn’t care why / where you install that cert - as long as you don’t break their rules and get caught, they don’t revoke your certificate.



          Now - if the java executable gets notarized and signed by someone else, you might not need this at all and you’re not embedding executable bits and just resources and text or source code. For example, it doesn’t make sense to pay if you write swift scripts or python scripts or bash (or other shell) scripts. That would be like code signing a word doc and not word the program itself.






          share|improve this answer















          Basically if I understand your question - yes, it’s allowed, but might not be required.



          When you pay to be a developer, Apple generates a secure certificate you can use for many functions - one of which is to code sign a folder of files. Applications on macOS are just bundles of files with some conventions which files make something a package or an app. You can sign a script, package, interpreted code bundle or a compiled app.



          • https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution

          Apple is offering additional items like notarizing an app but you should be able to sign your example app with a self-generated certificate before you pay for Apple to sign / provide your identity that all of their devices and OS will trust as valid.



          • https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution

          To recap, you pay for an identity that Apple validates. Of course if you abuse this, your certificate can and should be revoked but as long as you are signing legitimate apps you should expect to only have to pay annually for a renewal of your certificate. This is pretty much analogous to getting an SSL cert. You pay for those periodically, and then the signer generally doesn’t care why / where you install that cert - as long as you don’t break their rules and get caught, they don’t revoke your certificate.



          Now - if the java executable gets notarized and signed by someone else, you might not need this at all and you’re not embedding executable bits and just resources and text or source code. For example, it doesn’t make sense to pay if you write swift scripts or python scripts or bash (or other shell) scripts. That would be like code signing a word doc and not word the program itself.







          share|improve this answer














          share|improve this answer



          share|improve this answer








          edited Mar 30 at 15:27

























          answered Mar 30 at 13:00









          bmike♦bmike

          163k46293634




          163k46293634












          • Thanks. I shall give it a try becoming an Apple developer.

            – Branko
            Mar 30 at 23:24

















          • Thanks. I shall give it a try becoming an Apple developer.

            – Branko
            Mar 30 at 23:24
















          Thanks. I shall give it a try becoming an Apple developer.

          – Branko
          Mar 30 at 23:24





          Thanks. I shall give it a try becoming an Apple developer.

          – Branko
          Mar 30 at 23:24



          Popular posts from this blog

          Bruad Bilen | Luke uk diar | NawigatsjuunCommonskategorii: BruadCommonskategorii: RunstükenWikiquote: Bruad

          Modern approach to radio buttons

          Glitch in AC sine wave interfering with phase cut dimming