The code signing certificate that has been used for four years to sign the TurboVNC JAR files for use with Java Web Start expired this week. Since I used a timestamp authority when signing the JARs, JAR files for existing releases should continue to work (please let me know if they don't.)
Unfortunately Thawte no longer provides individual code signing certificates, so there is no way to renew my certificate. In addition to spending money that I don't have right now (2018 was a very bad year financially for VirtualGL, TurboVNC, and libjpeg-turbo), the process of getting on board with another certificate authority is painful enough to give me pause, particularly given that Java Web Start is now a deprecated feature. I would like to hear back (off-list is fine) from any organizations that are currently using Java Web Start with TurboVNC: 1. How many users do you estimate use TurboVNC with Java Web Start within your organization? 2. Do you re-sign the JAR files using your own certificate or keep them signed with my certificate? 3. If you currently rely on my certificate, would your deployment scenario allow you to white-list a self-signed certificate from The VirtualGL Project? (This would generally involve importing the certificate on the client side using the Java Control Panel.) 4. Would your company be willing to donate the money to this project (about US$200) necessary for me to purchase a Comodo individual code signing certificate for the next two years, thus ensuring that the TurboVNC JAR files for the 2.2.2 and 3.0.x releases remain signed? If I don't get feedback on this, my default course of action is going to be generating a self-signed certificate for The VirtualGL Project, thus requiring anyone who wishes to continue using TurboVNC with Java Web Start to white-list our certificate. DRC -- You received this message because you are subscribed to the Google Groups "TurboVNC User Discussion/Support" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/turbovnc-users/aee9c184-80ea-544b-815b-35868c985c8f%40virtualgl.org. For more options, visit https://groups.google.com/d/optout.
