Digital Signature Error on JNLP - Windows 10

[iTwo]

When I launch Sweethome3D from the website JNLP, I get
"This application contains a digital signature in which the launching JLNP is not signed" and "The digital signature was generated with an untrusted certificate"

Normal?


The certificate is signed by "Certum Trusted Network CA"
And valid to May 17 2036

Windows 10.

[Puybaret]

What Java version do you use?
Certum root Certificate is valid for 12 more years, but the certificate they delivered to me "Emmanuel Puybaret" is valid until April 2026. Can you check?

[iTwo]

I start at https://www.sweethome3d.com/download.jsp
Download the JNLP
Open Web Start begins
The Sweet Home 3D logo / eTeks shows up.
I get this error box: https://ibb.co/f9ND5vn
Then this "untrusted certificate" box: https://ibb.co/Dw1b1r2

Here's the cert. The "copy to clipboard" button does not work
https://ibb.co/hMWnfgZ

=====================================
It may be that OpenWebStart does not have the proper root certificate?
Do I need to download something from https://www.certum.eu/en/cert_expertise ... tificates/

[Puybaret]

I'm not sure that the digital signature can work under Linux. Certum doesn't provide support for Linux.
But you should still be able to run the application, no?

[iTwo]

No Linux involved.
The report is based on Windows 10, fully patched.

[iTwo]

Any update on this?
This is not a Linux issue, but Windows 10.

[Puybaret]

This must be a bug in Open Web Start. I just tested it again with Java Web Start in Oracle Java 8 and had no problem.

[iTwo]

Are you able to repeat the problem with OpenWebStart?
https://openwebstart.com/download/

That's the future. The Java/Oracle stuff is legacy.

[Puybaret]

Could you report the issue to OpenWebStart team providing your screenshots?
I'm not at all an expert in certificates so maybe they can understand the issue more quickly.

[iTwo]

Could you try it yourself and see if it's something simple on your end?

"Java Web Start (JWS) was deprecated in Java 9, and starting with Java 11, Oracle removed JWS from their JDK distributions. This means that clients that have the latest version of Java installed can no longer use JWS-based applications. And since public support of Java 8 has ended in Q2/2019, companies no longer get any updates and security fixes for Java Web Start.

This is why we decided to create OpenWebStart, an open source reimplementation of the Java Web Start technology. Our replacement provides the most commonly used features of Java Web Start and the JNLP standard, so that your customers can continue using applications based on Java Web Start and JNLP without any change."