Okay, looks like the certs have not expired: PS C:\p\documents\certificates\apache> openssl pkcs12 -in .\installapacheflex_self.p12 -out certificate.pem -nodes Enter Import Password: MAC verified OK PS C:\p\documents\certificates\apache> cat certificate.pem | openssl x509 -noout -enddate notAfter=Aug 30 08:43:51 2037 GMT
The only possibility now is that the previous versions were signed with a different cert. I guess we just need to add a note in the announce email to uninstall the previous version, IFF there is a certificate error durring installation. Thanks, Om On Wed, Nov 22, 2017 at 11:47 PM, Piotr Zarzycki <piotrzarzyck...@gmail.com> wrote: > Om, > > Thanks for explanation. I sent you certificates. > > Piotr > > 2017-11-23 8:16 GMT+01:00 OmPrakash Muppirala <bigosma...@gmail.com>: > > > On Nov 22, 2017 10:13 PM, "Piotr Zarzycki" <piotrzarzyck...@gmail.com> > > wrote: > > > > Hi Om, > > > > I'm not sure what do you mean by checked previous version. I did check > > Installer 3.2 and it not have such tab as Moonshine or Adobe Extension > > Manager. > > > > > > This is how I understand how all this works: > > > > I think Moonshine probably got a certificate from a trusted Certificate > > Authority. That way, the OS which probably already has the the root > > certificate and can thus verify the validity of the Moonshine IDE. > > > > The certificate we use for signing the installer was a self created cert. > > So, if you manually install the certificate, then the OS can verify the > > signature of the Installer binary. > > > > In our case, there is a good chance that our certificate has expired. > Can > > you send it to me privately so I can try to check its validity? > > > > Thanks, > > Om > > > > > > Thanks, Piotr > > > > 2017-11-22 23:13 GMT+01:00 OmPrakash Muppirala <bigosma...@gmail.com>: > > > > > On Wed, Nov 22, 2017 at 2:06 PM, Piotr Zarzycki < > > piotrzarzyck...@gmail.com > > > > > > > wrote: > > > > > > > Om, > > > > > > > > Well I'm not so sure. I'm also not an expert in signing, but for > > example > > > > Moonshine have also some signing certs and I see that tab "Digital > > > > Signature" after installation. > > > > > > > > Piotr > > > > > > > > > > > > > > > Have you checked the previous releases? > > > > > > > > > > > > > > 2017-11-22 23:02 GMT+01:00 OmPrakash Muppirala <bigosma...@gmail.com > >: > > > > > > > > > On Wed, Nov 22, 2017 at 12:51 PM, piotrz < > piotrzarzyck...@gmail.com> > > > > > wrote: > > > > > > > > > > > Guys, > > > > > > > > > > > > Something is totally wrong. I just installed Installer 3.2 and > > check > > > > > > whether > > > > > > it has digital sign and it's not. For the comparison I've checked > > > > "Adobe > > > > > > Extension Manager CS6" and properties looks like that: > > > > > > > > > > > > <http://apache-flex-development.2333347.n4.nabble. > > > > > > com/file/t740/installer_3.png> > > > > > > > > > > > > Piotr > > > > > > > > > > > > > > > > > I think the signature is checked by the AIR runtime and not the > > system. > > > > > So, this makes sense. > > > > > > > > > > Thanks, > > > > > Om > > > > > > > > > > > > > > > > > > > > > > > > > > > > ----- > > > > > > Patreon: https://www.patreon.com/piotrzarzycki > > > > > > -- > > > > > > Sent from: http://apache-flex-development.2333347.n4.nabble.com/ > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > Piotr Zarzycki > > > > > > > > Patreon: *https://www.patreon.com/piotrzarzycki > > > > <https://www.patreon.com/piotrzarzycki>* > > > > > > > > > > > > > > > -- > > > > Piotr Zarzycki > > > > Patreon: *https://www.patreon.com/piotrzarzycki > > <https://www.patreon.com/piotrzarzycki>* > > > > > > -- > > Piotr Zarzycki > > Patreon: *https://www.patreon.com/piotrzarzycki > <https://www.patreon.com/piotrzarzycki>* >
