After some experimenting, it looks like 3.2 was not signed with the correct cert. 3.3 will correctly offer to upgrade 3.1.
I guess we'll have to do more testing of the certs in the future to make sure we use the right one. Somehow we missed that for 3.2. Because we didn't force upgrades from 3.1 to 3.2, there may be a lot of folks still running 3.1 and 3.1 users may not need to uninstall before installing 3.3. HTH, -Alex On 11/23/17, 11:40 AM, "omup...@gmail.com on behalf of OmPrakash Muppirala" <omup...@gmail.com on behalf of bigosma...@gmail.com> wrote: >Okay, looks like the certs have not expired: > >PS C:\p\documents\certificates\apache> openssl pkcs12 -in >.\installapacheflex_self.p12 -out certificate.pem -nodes >Enter Import Password: >MAC verified OK >PS C:\p\documents\certificates\apache> cat certificate.pem | openssl x509 >-noout -enddate >notAfter=Aug 30 08:43:51 2037 GMT > >The only possibility now is that the previous versions were signed with a >different cert. I guess we just need to add a note in the announce email >to uninstall the previous version, IFF there is a certificate error >durring >installation. > >Thanks, >Om > >On Wed, Nov 22, 2017 at 11:47 PM, Piotr Zarzycki ><piotrzarzyck...@gmail.com> >wrote: > >> Om, >> >> Thanks for explanation. I sent you certificates. >> >> Piotr >> >> 2017-11-23 8:16 GMT+01:00 OmPrakash Muppirala <bigosma...@gmail.com>: >> >> > On Nov 22, 2017 10:13 PM, "Piotr Zarzycki" <piotrzarzyck...@gmail.com> >> > wrote: >> > >> > Hi Om, >> > >> > I'm not sure what do you mean by checked previous version. I did check >> > Installer 3.2 and it not have such tab as Moonshine or Adobe Extension >> > Manager. >> > >> > >> > This is how I understand how all this works: >> > >> > I think Moonshine probably got a certificate from a trusted >>Certificate >> > Authority. That way, the OS which probably already has the the root >> > certificate and can thus verify the validity of the Moonshine IDE. >> > >> > The certificate we use for signing the installer was a self created >>cert. >> > So, if you manually install the certificate, then the OS can verify >>the >> > signature of the Installer binary. >> > >> > In our case, there is a good chance that our certificate has expired. >> Can >> > you send it to me privately so I can try to check its validity? >> > >> > Thanks, >> > Om >> > >> > >> > Thanks, Piotr >> > >> > 2017-11-22 23:13 GMT+01:00 OmPrakash Muppirala <bigosma...@gmail.com>: >> > >> > > On Wed, Nov 22, 2017 at 2:06 PM, Piotr Zarzycki < >> > piotrzarzyck...@gmail.com >> > > > >> > > wrote: >> > > >> > > > Om, >> > > > >> > > > Well I'm not so sure. I'm also not an expert in signing, but for >> > example >> > > > Moonshine have also some signing certs and I see that tab "Digital >> > > > Signature" after installation. >> > > > >> > > > Piotr >> > > > >> > > > >> > > > >> > > Have you checked the previous releases? >> > > >> > > >> > > > >> > > > 2017-11-22 23:02 GMT+01:00 OmPrakash Muppirala >><bigosma...@gmail.com >> >: >> > > > >> > > > > On Wed, Nov 22, 2017 at 12:51 PM, piotrz < >> piotrzarzyck...@gmail.com> >> > > > > wrote: >> > > > > >> > > > > > Guys, >> > > > > > >> > > > > > Something is totally wrong. I just installed Installer 3.2 and >> > check >> > > > > > whether >> > > > > > it has digital sign and it's not. For the comparison I've >>checked >> > > > "Adobe >> > > > > > Extension Manager CS6" and properties looks like that: >> > > > > > >> > > > > > >><https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fapache-f >>lex-development.2333347.n4.nabble&data=02%7C01%7C%7Cd42bf869ba4041c306250 >>8d532aa20b9%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C6364706286378980 >>25&sdata=pcqHA38Z%2F%2BlCyf8cy9oZS1uFiP02xqQNu6laQ%2BVgrQk%3D&reserved=0. >> > > > > > com/file/t740/installer_3.png> >> > > > > > >> > > > > > Piotr >> > > > > > >> > > > > > >> > > > > I think the signature is checked by the AIR runtime and not the >> > system. >> > > > > So, this makes sense. >> > > > > >> > > > > Thanks, >> > > > > Om >> > > > > >> > > > > >> > > > > > >> > > > > > >> > > > > > ----- >> > > > > > Patreon: >>https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.patr >>eon.com%2Fpiotrzarzycki&data=02%7C01%7C%7Cd42bf869ba4041c3062508d532aa20b >>9%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636470628637898025&sdata=R >>M5cXZCuqaogWW3t21N5BvdVlyXFoBnNqti%2F1RX5OjM%3D&reserved=0 >> > > > > > -- >> > > > > > Sent from: >>https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fapache-fl >>ex-development.2333347.n4.nabble.com%2F&data=02%7C01%7C%7Cd42bf869ba4041c >>3062508d532aa20b9%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C6364706286 >>37898025&sdata=ex%2FmJGwNu0yCR%2BLmWLGi2EbOg6P9IzG%2FWANt2PuFUvU%3D&reser >>ved=0 >> > > > > > >> > > > > >> > > > >> > > > >> > > > >> > > > -- >> > > > >> > > > Piotr Zarzycki >> > > > >> > > > Patreon: >>*https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.pat >>reon.com%2Fpiotrzarzycki&data=02%7C01%7C%7Cd42bf869ba4041c3062508d532aa20 >>b9%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636470628637898025&sdata= >>RM5cXZCuqaogWW3t21N5BvdVlyXFoBnNqti%2F1RX5OjM%3D&reserved=0 >> > > > >><https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.pat >>reon.com%2Fpiotrzarzycki&data=02%7C01%7C%7Cd42bf869ba4041c3062508d532aa20 >>b9%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636470628637898025&sdata= >>RM5cXZCuqaogWW3t21N5BvdVlyXFoBnNqti%2F1RX5OjM%3D&reserved=0>* >> > > > >> > > >> > >> > >> > >> > -- >> > >> > Piotr Zarzycki >> > >> > Patreon: >>*https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.pat >>reon.com%2Fpiotrzarzycki&data=02%7C01%7C%7Cd42bf869ba4041c3062508d532aa20 >>b9%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636470628637898025&sdata= >>RM5cXZCuqaogWW3t21N5BvdVlyXFoBnNqti%2F1RX5OjM%3D&reserved=0 >> > >><https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.pat >>reon.com%2Fpiotrzarzycki&data=02%7C01%7C%7Cd42bf869ba4041c3062508d532aa20 >>b9%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636470628637898025&sdata= >>RM5cXZCuqaogWW3t21N5BvdVlyXFoBnNqti%2F1RX5OjM%3D&reserved=0>* >> > >> >> >> >> -- >> >> Piotr Zarzycki >> >> Patreon: >>*https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.pat >>reon.com%2Fpiotrzarzycki&data=02%7C01%7C%7Cd42bf869ba4041c3062508d532aa20 >>b9%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636470628637898025&sdata= >>RM5cXZCuqaogWW3t21N5BvdVlyXFoBnNqti%2F1RX5OjM%3D&reserved=0 >> >><https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.pat >>reon.com%2Fpiotrzarzycki&data=02%7C01%7C%7Cd42bf869ba4041c3062508d532aa20 >>b9%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636470628637898025&sdata= >>RM5cXZCuqaogWW3t21N5BvdVlyXFoBnNqti%2F1RX5OjM%3D&reserved=0>* >>
