2 Replies Latest reply on May 1, 2015 1:59 PM by dbhayes

    Certificate nightmare...


      Hello, I have been dealing with this certificate nightmare for a few months now. I am hoping someone can assist me in exporting to a ZXP without error. I am using Eclipse [Version: Luna Service Release 1 (4.4.1)] and Adobe Extension Builder 3 to export a ZXP that install and works in PSD CC 2014. I continue to see the first error screen shot below, every time I install the extension using Adobe Extension Manager CC Version I have even attempted to repackage with Packager and ZXPSignCmd, with no success.


      What is the exact type of CA I need to not get this error? The CA I am using is self-signed, however I get an "Invalid Certificate" error when I build with an AdobeAir certificate. Can you point me in the correct direction please?


      If anyone can assist, I would be very grateful.



      In Need of Guidance


      Adobe Extension Manager error:


      AdobeAir certificate error from Eclipse build:


      Eclipse version:


      Extension Manager version:


        • 1. Re: Certificate nightmare...
          fgregor Adobe Employee

          Hi there,


          Thanks for persevering with this and getting in touch.


          If you have an Adobe AIR certificate you should be able to use this, but with some certificate issuers there can be problems with the ordering of the certification chain inside the certificate file itself.


          If you are on Windows, the easiest way to resolve this is to import it and then re-export it (unfortunately it's quite a bit more complicated on Mac).


          Firstly, double-click on your P12 file to import it into your certificate store.


          Then, in Internet Explorer, go to Internet Options, click on the Content tab and then Certificates.


          Find the signing certificate you just imported (probably listed under Personal), click on it and then click Export.


          A wizard will appear - select "Yes, export the private key", and when asked to select a format choose PKCS #12 (.PFX). Check the box "Include all certificates in the certification path if possible", and then choose a password.


          The exported PFX file can be renamed to P12 to use with ZXPSignCmd, UCF.jar or Extension Builder (along with your new chosen password).


          Alternatively - if you want to use your self signed certificate, the "untrusted" warning dialog you're seeing will not appear if you're only distributing your extension via Adobe Add-ons (or Adobe Exchange www.adobeexchange.com). It's only really necessary to use a commercial signing certificate for distributing your ZXP through other channels.


          Good luck!


          Best regards,


          • 2. Re: Certificate nightmare...
            dbhayes Level 1

            Thank you so much Fraser! It finally works!