Hi Alex, Thanks for that information. I will post the announce than.
Piotr 2017-11-25 8:43 GMT+01:00 Alex Harui <aha...@adobe.com.invalid>: > After some experimenting, it looks like 3.2 was not signed with the > correct cert. 3.3 will correctly offer to upgrade 3.1. > > I guess we'll have to do more testing of the certs in the future to make > sure we use the right one. Somehow we missed that for 3.2. Because we > didn't force upgrades from 3.1 to 3.2, there may be a lot of folks still > running 3.1 and 3.1 users may not need to uninstall before installing 3.3. > > HTH, > -Alex > > On 11/23/17, 11:40 AM, "omup...@gmail.com on behalf of OmPrakash > Muppirala" <omup...@gmail.com on behalf of bigosma...@gmail.com> wrote: > > >Okay, looks like the certs have not expired: > > > >PS C:\p\documents\certificates\apache> openssl pkcs12 -in > >.\installapacheflex_self.p12 -out certificate.pem -nodes > >Enter Import Password: > >MAC verified OK > >PS C:\p\documents\certificates\apache> cat certificate.pem | openssl x509 > >-noout -enddate > >notAfter=Aug 30 08:43:51 2037 GMT > > > >The only possibility now is that the previous versions were signed with a > >different cert. I guess we just need to add a note in the announce email > >to uninstall the previous version, IFF there is a certificate error > >durring > >installation. > > > >Thanks, > >Om > > > >On Wed, Nov 22, 2017 at 11:47 PM, Piotr Zarzycki > ><piotrzarzyck...@gmail.com> > >wrote: > > > >> Om, > >> > >> Thanks for explanation. I sent you certificates. > >> > >> Piotr > >> > >> 2017-11-23 8:16 GMT+01:00 OmPrakash Muppirala <bigosma...@gmail.com>: > >> > >> > On Nov 22, 2017 10:13 PM, "Piotr Zarzycki" <piotrzarzyck...@gmail.com > > > >> > wrote: > >> > > >> > Hi Om, > >> > > >> > I'm not sure what do you mean by checked previous version. I did check > >> > Installer 3.2 and it not have such tab as Moonshine or Adobe Extension > >> > Manager. > >> > > >> > > >> > This is how I understand how all this works: > >> > > >> > I think Moonshine probably got a certificate from a trusted > >>Certificate > >> > Authority. That way, the OS which probably already has the the root > >> > certificate and can thus verify the validity of the Moonshine IDE. > >> > > >> > The certificate we use for signing the installer was a self created > >>cert. > >> > So, if you manually install the certificate, then the OS can verify > >>the > >> > signature of the Installer binary. > >> > > >> > In our case, there is a good chance that our certificate has expired. > >> Can > >> > you send it to me privately so I can try to check its validity? > >> > > >> > Thanks, > >> > Om > >> > > >> > > >> > Thanks, Piotr > >> > > >> > 2017-11-22 23:13 GMT+01:00 OmPrakash Muppirala <bigosma...@gmail.com > >: > >> > > >> > > On Wed, Nov 22, 2017 at 2:06 PM, Piotr Zarzycki < > >> > piotrzarzyck...@gmail.com > >> > > > > >> > > wrote: > >> > > > >> > > > Om, > >> > > > > >> > > > Well I'm not so sure. I'm also not an expert in signing, but for > >> > example > >> > > > Moonshine have also some signing certs and I see that tab "Digital > >> > > > Signature" after installation. > >> > > > > >> > > > Piotr > >> > > > > >> > > > > >> > > > > >> > > Have you checked the previous releases? > >> > > > >> > > > >> > > > > >> > > > 2017-11-22 23:02 GMT+01:00 OmPrakash Muppirala > >><bigosma...@gmail.com > >> >: > >> > > > > >> > > > > On Wed, Nov 22, 2017 at 12:51 PM, piotrz < > >> piotrzarzyck...@gmail.com> > >> > > > > wrote: > >> > > > > > >> > > > > > Guys, > >> > > > > > > >> > > > > > Something is totally wrong. I just installed Installer 3.2 and > >> > check > >> > > > > > whether > >> > > > > > it has digital sign and it's not. For the comparison I've > >>checked > >> > > > "Adobe > >> > > > > > Extension Manager CS6" and properties looks like that: > >> > > > > > > >> > > > > > > >><https://na01.safelinks.protection.outlook.com/?url= > http%3A%2F%2Fapache-f > >>lex-development.2333347.n4.nabble&data=02%7C01%7C% > 7Cd42bf869ba4041c306250 > >>8d532aa20b9%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0% > 7C6364706286378980 > >>25&sdata=pcqHA38Z%2F%2BlCyf8cy9oZS1uFiP02xqQNu6laQ% > 2BVgrQk%3D&reserved=0. > >> > > > > > com/file/t740/installer_3.png> > >> > > > > > > >> > > > > > Piotr > >> > > > > > > >> > > > > > > >> > > > > I think the signature is checked by the AIR runtime and not the > >> > system. > >> > > > > So, this makes sense. > >> > > > > > >> > > > > Thanks, > >> > > > > Om > >> > > > > > >> > > > > > >> > > > > > > >> > > > > > > >> > > > > > ----- > >> > > > > > Patreon: > >>https://na01.safelinks.protection.outlook.com/?url= > https%3A%2F%2Fwww.patr > >>eon.com%2Fpiotrzarzycki&data=02%7C01%7C%7Cd42bf869ba4041c3062508d532aa > 20b > >>9%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0% > 7C636470628637898025&sdata=R > >>M5cXZCuqaogWW3t21N5BvdVlyXFoBnNqti%2F1RX5OjM%3D&reserved=0 > >> > > > > > -- > >> > > > > > Sent from: > >>https://na01.safelinks.protection.outlook.com/?url= > http%3A%2F%2Fapache-fl > >>ex-development.2333347.n4.nabble.com%2F&data=02%7C01%7C% > 7Cd42bf869ba4041c > >>3062508d532aa20b9%7Cfa7b1b5a7b34438794aed2c178de > cee1%7C0%7C0%7C6364706286 > >>37898025&sdata=ex%2FmJGwNu0yCR%2BLmWLGi2EbOg6P9IzG% > 2FWANt2PuFUvU%3D&reser > >>ved=0 > >> > > > > > > >> > > > > > >> > > > > >> > > > > >> > > > > >> > > > -- > >> > > > > >> > > > Piotr Zarzycki > >> > > > > >> > > > Patreon: > >>*https://na01.safelinks.protection.outlook.com/?url= > https%3A%2F%2Fwww.pat > >>reon.com%2Fpiotrzarzycki&data=02%7C01%7C%7Cd42bf869ba4041c3062508d532aa > 20 > >>b9%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0% > 7C636470628637898025&sdata= > >>RM5cXZCuqaogWW3t21N5BvdVlyXFoBnNqti%2F1RX5OjM%3D&reserved=0 > >> > > > > >><https://na01.safelinks.protection.outlook.com/?url= > https%3A%2F%2Fwww.pat > >>reon.com%2Fpiotrzarzycki&data=02%7C01%7C%7Cd42bf869ba4041c3062508d532aa > 20 > >>b9%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0% > 7C636470628637898025&sdata= > >>RM5cXZCuqaogWW3t21N5BvdVlyXFoBnNqti%2F1RX5OjM%3D&reserved=0>* > >> > > > > >> > > > >> > > >> > > >> > > >> > -- > >> > > >> > Piotr Zarzycki > >> > > >> > Patreon: > >>*https://na01.safelinks.protection.outlook.com/?url= > https%3A%2F%2Fwww.pat > >>reon.com%2Fpiotrzarzycki&data=02%7C01%7C%7Cd42bf869ba4041c3062508d532aa > 20 > >>b9%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0% > 7C636470628637898025&sdata= > >>RM5cXZCuqaogWW3t21N5BvdVlyXFoBnNqti%2F1RX5OjM%3D&reserved=0 > >> > > >><https://na01.safelinks.protection.outlook.com/?url= > https%3A%2F%2Fwww.pat > >>reon.com%2Fpiotrzarzycki&data=02%7C01%7C%7Cd42bf869ba4041c3062508d532aa > 20 > >>b9%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0% > 7C636470628637898025&sdata= > >>RM5cXZCuqaogWW3t21N5BvdVlyXFoBnNqti%2F1RX5OjM%3D&reserved=0>* > >> > > >> > >> > >> > >> -- > >> > >> Piotr Zarzycki > >> > >> Patreon: > >>*https://na01.safelinks.protection.outlook.com/?url= > https%3A%2F%2Fwww.pat > >>reon.com%2Fpiotrzarzycki&data=02%7C01%7C%7Cd42bf869ba4041c3062508d532aa > 20 > >>b9%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0% > 7C636470628637898025&sdata= > >>RM5cXZCuqaogWW3t21N5BvdVlyXFoBnNqti%2F1RX5OjM%3D&reserved=0 > >> > >><https://na01.safelinks.protection.outlook.com/?url= > https%3A%2F%2Fwww.pat > >>reon.com%2Fpiotrzarzycki&data=02%7C01%7C%7Cd42bf869ba4041c3062508d532aa > 20 > >>b9%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0% > 7C636470628637898025&sdata= > >>RM5cXZCuqaogWW3t21N5BvdVlyXFoBnNqti%2F1RX5OjM%3D&reserved=0>* > >> > > -- Piotr Zarzycki Patreon: *https://www.patreon.com/piotrzarzycki <https://www.patreon.com/piotrzarzycki>*
