Cheapest Java Code Signing Certificate? (not self-signed)

Question

Where can I get an inexpensive Java code signing certificate?

Wherever I look, they want from USD200 to USD300 a year! Unfortunately, I cannot use self-signed because I am trying to get rid of scary warnings so that users are more likely to accept my application. And as far as I know (for the question about stack overflow. Are Java code signing certificates the same with SSL certificates? ), It should be a code signing certificate, it cannot be an SSL certificate.

Answer 1

What about startssl ? They offer code signing certificates for $ 49.90 for 2 years (with wild card capabilities). I have not tried using it, so no guarantees, but it looks good.

UPDATE: StartSSL is no longer a valid option, even considering the previous limitations. Google , Mozilla and Apple have ceased to trust them. Therefore, I would recommend everyone to use them, given this development. Providing the current state of affairs, this should NOT be an accepted answer . Sorry!

Answer 2

How about $ 80 a year? Tucows is obviously reselling for Comodo on the Author’s site . Again, apparently, they give an additional discount for 3 years (~ 199 US dollars).

I can’t confirm this without creating my account there (which, frankly, is higher than my estimate), but if this is so much and it works with Java, then $ 66 a year for 3 years does not seem too cool.

Hopefully GoDaddy will add this to his bag of tricks one day.

Edit

The prices are as follows:

• 1 year for $ 75
• 2 years for 140 dollars (10 US dollars).
• 3 years for $ 195 (save $ 30)

And in appearance , they can be used to sign Java applications. Happy Days.

Answer 3

You can find out if CA certificates will work to sign Java code by looking at the Java cacerts file, which lists all the CAs known by Java. If their certificate is in this file, then Java will not complain about the signed code. If it is not, it will alert users. For example:

root@girflet:~# keytool -list -keystore /usr/lib/jvm/java-6-sun-1.6.0.15/jre/lib/security/cacerts | grep comodo

Enter keystore password: changeit

comodoaaaca, 02-May-2006, trustedCertEntry,

Please note that I had to enter the default keystore password, changeit. This command should also work on Windows, although you will have to change the path to the cacerts file and you will not have grep. Use more, not pages, until you find or find what you are looking for.

To date, Comodo is in the cacerts file, but startssl is not. Thus, startssl cert will not be very good for Java code.

Answer 4

You can also get Comodo certificates at a discount at a discount:

• Lindersoft : $ 79 for one year, $ 200 for 3 years plus $ 25 membership fee
• K Software : $ 99 per year

Answer 5

Another good option (I don’t know how long this will last) http://www.discountcodesigning.com/ They give you a real GlobalSign certificate for $ 99 (usually $ 229).

Despite the lack of branding, the site is managed by GlobalSign themselves and registered a little over two months ago. I have a feeling that they are conducting price testing to find out how many more sales they get.

Answer 6

The cheapest I can find is $ 149 / year (if you buy 3 years at once) from GlobalSign . I don’t know, I know!

Answer 7

Comodo has code signing certificates for $ 179.95 a year, and you only need to buy 1 year. They do not talk about Java. I don’t know if they are different from what you use for Microsoft-based signatures.