Java-Gaming.org Hi !
Featured games (91)
games approved by the League of Dukes
Games in Showcase (804)
Games in Android Showcase (239)
games submitted by our members
Games in WIP (868)
games currently in development
News: Read the Java Gaming Resources, or peek at the official Java tutorials
 
    Home     Help   Search   Login   Register   
Pages: [1]
  ignore  |  Print  
  code signing certificates ...or how to ease the user?  (Read 3723 times)
0 Members and 1 Guest are viewing this topic.
Offline klaus
« Posted 2015-07-21 15:12:19 »

So until now we are in a closed alpha state meaning we know all our testers personally and they know us. 

When you download our zip file with Chrome it will shout out with something along the lines of "this is an unusual download, do you really want to keep this file?" ... mkay... It's a zip file. In this zip file is an installer. When you run this installer the next complaint is just around the corner. "This file looks suspicious" Windows 10 says and you have to actively search the arrow where you can allow Windows to proceed starting the installer.

So, obviously we can't leave it like that.

My web search suggests that cheapsslsecurity.com has the cheapest code signing certificates (comodo) - do you have any experiences with them?

Or do you know of another way to distribute your game with bundled JRE and installer, where the user doesn't have to cope with this fear-inducing warnings?  Wink

My goal is to make it as easy as possible for the player to install and run the game afterwards.

How do you handle packaging?
Offline princec

« JGO Spiffy Duke »


Medals: 1146
Projects: 3
Exp: 20 years


Eh? Who? What? ... Me?


« Reply #1 - Posted 2015-07-21 18:51:52 »

I used Comodo before. It works, is all I can say.

Cas Smiley

Offline Riven
Administrator

« JGO Overlord »


Medals: 1371
Projects: 4
Exp: 16 years


Hand over your head.


« Reply #2 - Posted 2015-07-21 20:03:12 »

Signed code is safe, as these clumsy hackers are too fumbly with their purchased certificates. Certificate Authorities have this proven track record of little to no hackery and you rightfully owe them a hundred bucks a year for all the work that they do: allowing that match-three game to be launched with only one toe curling warning.

The future is the web-browser - consider that when purchasing your pricy code signing certificate. And no, there is no alternative than to suck it up and waste your hard earned money --- only to see virusscanners jumping in, corrupting your properly extracted JRE. The future is in the web-browser, they say. Now sing along.

Hi, appreciate more people! Σ ♥ = ¾
Learn how to award medals... and work your way up the social rankings!
Games published by our own members! Check 'em out!
Legends of Yore - The Casual Retro Roguelike
Offline klaus
« Reply #3 - Posted 2015-07-21 20:10:26 »

only to see virusscanners jumping in, corrupting your properly extracted JRE.

That actually happens?


The future is in the web-browser, they say. Now sing along.

Maybe. But right now I doubt that real gamers like to play a game in the browser.
Offline Riven
Administrator

« JGO Overlord »


Medals: 1371
Projects: 4
Exp: 16 years


Hand over your head.


« Reply #4 - Posted 2015-07-21 20:19:37 »

Yes, that happens. At Puppygames we checked the hashes of all files against a known list, and hashes actually changed after a few seconds, or when the process launched the second time - especially with extracted DLLs. Virusscanners also tended to lock DLLs causing the JVM not to be able to load them. It's misery, really.

Long story short: running integrity checks on your files is never a bad idea.

Hi, appreciate more people! Σ ♥ = ¾
Learn how to award medals... and work your way up the social rankings!
Offline klaus
« Reply #5 - Posted 2015-07-21 20:47:13 »

oh my ... so you say I should write a native windows app that runs before the java process actually spawns, so I can check the integrity of the files and tell the user to shut down the virus scanner? Oh, FML ... I don't wanna do that. That's the kind of work in gamedev where a lot of time is spent for little output, but important nevertheless..  Emo Tongue

So what was your message to your players when you encountered that the hashes changed for the files?
Offline princec

« JGO Spiffy Duke »


Medals: 1146
Projects: 3
Exp: 20 years


Eh? Who? What? ... Me?


« Reply #6 - Posted 2015-07-21 21:43:49 »

"Use Steam"

Sad but true.

Cas Smiley

Pages: [1]
  ignore  |  Print  
 
 

 
Riven (581 views)
2019-09-04 15:33:17

hadezbladez (5510 views)
2018-11-16 13:46:03

hadezbladez (2402 views)
2018-11-16 13:41:33

hadezbladez (5772 views)
2018-11-16 13:35:35

hadezbladez (1223 views)
2018-11-16 13:32:03

EgonOlsen (4661 views)
2018-06-10 19:43:48

EgonOlsen (5682 views)
2018-06-10 19:43:44

EgonOlsen (3198 views)
2018-06-10 19:43:20

DesertCoockie (4095 views)
2018-05-13 18:23:11

nelsongames (5115 views)
2018-04-24 18:15:36
A NON-ideal modular configuration for Eclipse with JavaFX
by philfrei
2019-12-19 19:35:12

Java Gaming Resources
by philfrei
2019-05-14 16:15:13

Deployment and Packaging
by philfrei
2019-05-08 15:15:36

Deployment and Packaging
by philfrei
2019-05-08 15:13:34

Deployment and Packaging
by philfrei
2019-02-17 20:25:53

Deployment and Packaging
by mudlee
2018-08-22 18:09:50

Java Gaming Resources
by gouessej
2018-08-22 08:19:41

Deployment and Packaging
by gouessej
2018-08-22 08:04:08
java-gaming.org is not responsible for the content posted by its members, including references to external websites, and other references that may or may not have a relation with our primarily gaming and game production oriented community. inquiries and complaints can be sent via email to the info‑account of the company managing the website of java‑gaming.org
Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines | Managed by Enhanced Four Valid XHTML 1.0! Valid CSS!