Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Warning from Symantec Endpoint Protection Download Insight running jdk8 java.exe #179

Closed
lumpfish opened this issue Oct 10, 2017 · 4 comments
Labels
bug Issues that are problems in the code as reported by the community
Milestone

Comments

@lumpfish
Copy link
Contributor

When running the AdoptOpenJDK Java 8 builds on Windows, Symantec Endpoint Protection Download Insight identifies java.exe as a 'Security Risk' and pops up a Window claiming that it is

  • 'Unproven': There is little evidence that this file is trustworthy
    I am unable to suppress the pop ups because the Symantec settings are set by my employer.
    Is there something which can be added to the build to make java.exe 'trustworthy'?
@gdams
Copy link
Member

gdams commented Oct 10, 2017

so this is how the code signing works, Microsoft now needs more than just codesigning to trust files (it also relies on quantity of downloads) Hopefully this will stop being an issue soon!

See #161 for a solution

@lumpfish
Copy link
Contributor Author

Presumably that means that the number of downloads will start from zero for each new (e.g. nightly) build?

@gdams
Copy link
Member

gdams commented Oct 10, 2017

no it's actually about the number of times that certificate is found on Windows machines so in time it will be more trusted

@lumpfish
Copy link
Contributor Author

With the latest build download I now just get one popup with a count of many times the 'risk' has occurred many popups which is much more manageable. Closing this issue.

@karianna karianna added this to the 1.0.0 milestone Oct 10, 2017
@karianna karianna added the bug Issues that are problems in the code as reported by the community label Oct 10, 2017
@karianna karianna added this to Review/QA in temurin-build Oct 10, 2017
@karianna karianna moved this from Review/QA to Done in temurin-build Oct 10, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Issues that are problems in the code as reported by the community
Projects
No open projects
temurin-build
  
Done
Development

No branches or pull requests

3 participants