Posts Tagged ‘code-signing’

WCI Collaboration Hotfix and Certificate Warnings

Thursday, February 3rd, 2011

While this blog isn’t the de-facto source for Oracle WebCenter Interaction critical fixes, we’ve tracked a big chunk of the latest hotfixes – including the more recent Analytics update and Collaboration Critical Fix for IE8

I’ve done a couple of installs with this Collaboration IE8 fix, and although I still haven’t seen Bulk Upload or WebEdit really get bullet-proof (frankly, WebEdit in particular is the bane of my existence), one thing is certain with these updates:  Oracle updated the code-signing certificate for the Bulk Upload applet in the latest critical fix, but never bothered updating the WebEdit applet.

What does this mean?  Well, when you’re uploading files with the Bulk Upload applet, you get a message that the certificate has been validated by a trusted source:

But, whenever you load a page with Collaboration portlets on it, the WebEditControl applet loads (more on this another time), and you get a signature warning that says “The digital signature was generated with a trusted certificate but has expired”:

Oracle’s official stance can be summarized thusly: “Pfft, what’s the big deal, anyway?  Suck it up or fix it yourself.”.  OK, so while I took some liberties with my paraphrasing there (sorry Oracle!), I went with option two: self-signing the WebEditControl applet.  It’s a non-trivial exercise, and all you get out of the deal is a nice clean prompt without the warning, but I’ve heard enough inquiries about this warning so I figured I’d just fix it:

The best part for you?  You can save yourself the huge pain of getting a code-signing cert, and download the Integryst-signed .jar file after the break, and say goodbye to that signature warning! (more…)