Comments on: Survey: Is a ChosenSecurity certificate trusted on your machine?

By: Al

Al — Mon, 15 Feb 2010 11:16:31 +0000

Hi Paul

Tested on our new PB iXtreme Win 7, and it works perfectly without any trust problems.

Shows up exactly the same as in the image at the top of the page.

Thanks

By: Phil

Phil — Mon, 25 Jan 2010 23:50:57 +0000

Paul,
Interesting. I have 2 Vista 32b machines and it was recognized on one but NOT on the other…
I have also an XP and it did work.

Now, if a customer runs into the second case, does he have a way to get this root cert to get trusted?

Which of the 4 CA authorities that code-sign Air apps are trusted on the most computers?

By: Paul Robertson

Paul Robertson — Mon, 18 Jan 2010 21:52:29 +0000

Hi al,
Unfortunately the server that hosts my web site is not configured to recognize the .air extension. As a result, it sometimes serves .air files as .zip files (since that’s really what the .air file format is — a .zip file with a certain internal file structure.

If the file downloads with a .zip extension, just rename it to .air and it will work fine.

By: al

al — Wed, 13 Jan 2010 11:13:50 +0000

I cannot download the AIR, it just downloads as a .zip file and then inside it has a swf file?

Any reason for this?

Thanks, would love to test this thing out

By: Joern

Joern — Fri, 26 Jun 2009 09:14:10 +0000

I also has a test with Adobe AIR and Linux
I have used Adobe AIR togehter with Ubuntu.

1. Open Terminal
2. Download installationfile
3. Terminal: change into the folder you have stored the downlaod-file.
4. Use Command:
chmod +x adobeair_file-name.bin
5. additional use the Command:
sudo ./adobeair_file-name.bin
6. The program will be installed.

Adobe Air needs the two packages:
gnome-keyring and Kwallet

Inside the Ubuntu Installation these two packages are still installed. The installation are ready to use.

The AIR app shows “Verified”, so you got a YES with Ubuntu.

By: Matt

Matt — Fri, 26 Jun 2009 00:46:11 +0000

Yes, it worked on my Vista-64 machine.

Thanks for doing this. I’m purchasing a cert myself right now.

By: Paul Robertson

Paul Robertson — Thu, 25 Jun 2009 17:27:12 +0000

@Joern:

Thanks for trying this out (on two computers even!)

It’s certainly possible for CoderX or anyone else to have a “No” response. (Otherwise I wouldn’t have asked the question =) Admittedly it seems less likely since the cert was trusted for all the other responses I’ve gotten so far (including some that aren’t in the comments here). However, I haven’t heard from anyone using a Linux machine (as far as I know) so that may be what’s different, or it might be for some other reason.

As you say, the app was signed by my cert, which was signed by a root cert from the certificate authority. My real question that I’m hoping to answer is whether that CA’s root cert is trusted on a large number of machines.

It’s possible that the root cert isn’t trusted on a machine, either because it isn’t in the set of certificates that are installed with the operating system, or because the root cert was explicitly designated as not trusted on that computer.

For lots more details about how AIR uses code-signing certificates, see the article “Code Signing in Adobe AIR” by Oliver Goldman (AIR lead developer)

By: Joern

Joern — Thu, 25 Jun 2009 07:16:27 +0000

Yes twice

Mac OS X 10.5.6 as well as Windows XP

But i need to install the Adobe AIR (http://get.adobe.com/air/) first.

I can’t believe that CoderX reporst a ‘No’. It isn’t possible because the Adobe AIR certificate is signed by a root certificate which in stored inside the Adobe AIR app. The signed app is trusted ever.

By: CoderX

CoderX — Wed, 24 Jun 2009 23:14:09 +0000

No.

By: xtyler

xtyler — Wed, 24 Jun 2009 19:34:11 +0000

@probertson you twittered! congratulations, and I got a trusted install dialog.

By: Peter Elst

Peter Elst — Wed, 24 Jun 2009 18:42:35 +0000

Yes.

Mac OS X 10.5.7 - 2.4 Ghz Intel Core 2 Duo
2 GB 1067 MHz DDR3