code-signing

Signed assemblies prevent my service from starting

When I sign the assemblies in my service with the Verisign signtool.exe, it fails to start when the machine starts, on a machine running Windows 2003 Server. The event log has two events: "Timeout (30000 milliseconds) waiting for the xxx Service service to connect." and "The xxx Service service failed to start due to the following error...

Runtime CRC checking

Q. I have a hex code running on a machine. How do I calculate the checksum of the entire code at runtime? ...

Code signing Windows Mobile applications - Recommendations?

I'm tasked with obtaining a code signing certificate. Our application actually consists of 2 complementary components: a desktop application and a Windows Mobile application designed to run on PDAs. Currently our mobile install (via CAB file) triggers the security prompts in Windows Mobile 6 and it is confusing to our users. We want to e...

iPhone Error while building application for Device

I want to deploy an application to the iPhone which I previously tested on Simulator. I am following the jailbreak way but This Link but when I change the setting to Project, Set Active SDK, Device, I get the CodeSign Error as follows: Code Signing Identity 'iPhone Developer' does not match any code-signing certificate in your keychain...

Self Sign Certificate To Authenticode Certificate?

We deployed a windows application via ClickOnce and a self signer certificate that we created. We are now looking in to getting a Authenticode Certificate from a Certificate Authority like VeriSign. When we start signing our ClickOnce manifests with the new certificate, will our users have to re-install the application? Are there any k...

What's the main difference between signcode.exe and signtool.exe?

I can't really see a big difference other than signtool is newer and requires different file formats for your digital certificate? ...

Cannot run code on device

Hi I have some source code which I had developed and later gave to another team. They signed it with their certificate and provisioning profile. Now I have the code back and have set the appropriate values in the project properties for code signing identity (with my cert and profile). But when I run the application on a device, I get a...

Code Sign error after renewing my certificate

Hello, my certificate has just expired. I renewed it on Team section, then renew provisioning profile, and reinstall them on my keychain and xcode, and then I get this error : Code Sign error: The identity 'iPhone Developer' doesn't match any valid certificate/private key pair in the login keychain What should I do ? Thanks a lot Th...

How to verify a binary signed with a self-signed certificate?

We want to add automatic software updates to our application, but our company isn't yet ready to buy a code-signing certificate from a trusted root CA, so we'll be using a self-signed certificate to sign code updates (.exe and .dll) for now. Question: how to verify a binary signed with a self-signed certificate, without having to instal...

What are the ramifications of deleting your old distribution certificate if you have lost your private key? (iPhone SDK)

If I lost/have no access to the private key associated with a distribution certificate: Can I just create a new one? If I do, will it produce any problems during the submission process? Will apps signed with the old certificate stop working? Will I be able to update apps signed with the old certificate? ...

Blackberry - application signing

Hi From what little is available on the Internet for signing BB apps, I can guess that we just need the .cod file for signing an app and don't need the source code. Can someone please confirm this? Thanks. ...

How can I verifiy signed JARs with pure Java?

I don't want to use the jarsigner -verify. Is there no JAR util package for my problem? I just want to verfiy a JAR in pure Java. ...

profile doesn't match application identifier

I have just created a AdHoc distribution provisioning profile for the app id 49776ZQRBG.com.gfeed.ride I have the Bundle ID in the info.plist set to this, yet this provisining profile in the project settings is greyed out and states "profile doesn't match application identifier '49776ZQRBG.com.gfeed.ride'" If I look at the profile in t...

Why can't strongly named assemblies use assemblies that aren't signed?

To sign an assembly A you have to make sure all assemblies B, C, D that are used by A are signed, and then all assemblies that are used by B, C, D, and so on. I don't understand what's the security benefit of this. I think it's supposed to prevent tampering, but assembly A is allowed to open any file, and these can be tampered. The same ...

Using MSBuild to Sign ClickOnce or Assembly Error: MSB3321

I've set up my simple project in VS2008 to use a click-once installer. I've specified that the ClickOnce manifests should be signed by our comapny's pfx file. When I set this up in Visual Studio it asked for the password for the pfx file, which I gladly supplied. Everything works fine when I build and publish from within Visual Studio. I...

How Can I Prevent Needing to Re-sign My Code Every 1 or 2 Years?

I was reading What happens when a code signing certificate expires - Stack Overflow and wondering about a more solid answer. The answer provided was more about setting up your own CA. Even with your own CA you will still need to deal with expiring code certificates. If you signed the code without using a time stamping service, after t...

Code sign .NET assemblies or just the setup?

My company finally bought a code-signing certificate. I have a WinForms application (1 exe and several dlls), all assemblies are already signed with a strong name. The entire application is then packaged into a msi installer. Then I use NSIS to pack the msi, the bootstrapper and the prerequisites (Framework, SQL CE...) into a single set...

Question about provisioning assistant

The provisioning assistant in Program Portal doesn't allow me to add dot for App ID(like com.company.app). I can only add App ID with com.company.appname in Program Portal without assistant. But that App ID doesn't show up in assistant, what's the problem? ...

Strong name, Manifest, and Code Signing

What order should these be done in? I'm doing this from the command prompt for a .Net app. I was able to do just strong name and code signing successfully, but when I tried all three, it doesn't look like it worked (==> Vista still trying to run the app with elevated privileges resulting in a prompt, though I set the requestedexecution...

Is anything "sensitive" stored in an iPhone Xcode project folder?

I want to open source one of my iPhone applications (that I've already published in the iTunes store) but I obviously don't want to expose anything "sensitive" like provisioning certificates and code-signing keys, etc. I'm guessing that stuff is merely referenced from the Xcode project folder (actually stored in my keychain elsewhere on...