code-signing

Can't get my .Net Console App to run on a Server "The Publisher Could Not Be Verified".

Hi, I've written a simple C# console app that gets executed by SQL Server Integration Services as part of a datawarehouse load (on Windows Server 2003). Unfortunately the step that calls the .exe is failing because a Open File security warning dialog "The Publisher Could Not Be Verified. Are you sure you want to run this software" is ...

Code Signing as part of the build process

I'd like to understand some of the best practices with respect to code signing. We have an Eclipse-based application and think it would be appropriate to sign our plug-ins. This raised a lot of questions: Can/Should the private key be in source control? Should we sign the code as part of our nightly build process or as part of our rele...

JavaScript Code Signing

How can a user, using one of the major modern browsers, know for sure that he is running my unmodified javascript code even over an untrusted network? Here is some more info about my situation: I have a web application that deals with private information. The login process is an implementation of a password-authenticated key agreemen...

How to verify a jar signed with jarsigner programmatically

I'm wanting to sign a jar using jarsigner, then verify it using a Java application which does not have the signed jar as part of it's classpath (i.e. just using a filesystem location of the jar) Now my problem is getting the signature file out of the jar, is there a simple way to do this? I've had a play with the Inflater and Jar Input...

do i need to sign my app before submitting to app store?

do i need to sign my app with my distribution provisioning profile before submitting to app store? also tell me do i need to add entitlement as we do in ad hoc or simply build with app store distribution provision profile? ...

Where do you download signcode.exe and other tools

If you decide to sign your code, you'll need: signcode.exe makecert.exe cert2spc.exe pvk2pfx.exe What's the best place to download these tools? Is there a way to do this without downloading large quantities of the Microsoft Windows SDK? ...

Null Reference in "SignFile" task when signing .Net manifest

I've written a .Net WCF Office 2007 app which uses ClickOnce as an installer. I'm using MSBuild via commandline to sign it, but I'm getting the following error: C:\Program Files\MSBuild\Microsoft\VisualStudio\v9.0\OfficeTools\Microso ft.VisualStudio.Tools.Office.Office2007.targets(250,9): error MSB4018: T he "SignFile" task failed unexp...

Code signing certificate

Where can I get a free code signing certificate for signing my applications? Ascertia used to give them out for free but apparently they don't anymore. Mine just expired and I'm looking to get another one? Any ideas? ...

Java Sign jars with server certificate

Is it possible to use a server certificate to sign a java web start app? What I want to know is if will it work. I have a trusted certificate for my server, and I would like to reuse the same certificate to sign an app. Right now, I have this warning: This jar contains entries whose signer certificate's ExtendedKeyUsage extension doesn...

ClickOnce - possible to add code signing certificate to existing deployment?

Let's say we have version 2.0 of an application deployed with around 3000 users already running the application. So far, the application was unsigned(signed by some auto generated certificate from VS). The users are using .NET 2.0. Now we would like to deploy a new version that will be signed using a certificate from tucows. One of t...

SSL certificate for HTTPs, activex signing and most mobile phone SDKs

Hello, this is mostly a deployement than a programming question. If I were to buy an SSL certificate from a CA, would I be able to use it to sign other applications (such as symbian, android, iphone ones)? If so, what (re)seller would you recommend? ...

How to sign auto run application in blackberry

I've read the help of eclipse in blackberry development environment about the auto run application that it requires signing. From where can I get the sign to enable my application to be auto run? ...

no NSLog after hacking xCode out of provisioning profile and code signing

I have been following the discussion from this article,this is what I have done: Edit /Developer/Platforms/iPhoneOS.platform/Info.plist to look like this: <key>NATIVE_ARCH</key> <string>armv6</string> <key>PLIST_FILE_OUTPUT_FORMAT</key> <string>binary</string> <key>PROVISIONING_PROFILE_ALLOWED</key> <string>NO</string> <key>PROVISION...

Preventing executables with invalid Authenticode signatures from running

We publish an update patch to our software package in a single executable file. The file is signed with an Authenticode digital signature, using the certificate issued to us. The file is downloaded to Windows XP or Vista systems that our customers operate, where they run it in order to update our software. Our PCI compliance auditor h...

How to sign code with only a .SPC file from GoDaddy?

I use InstallShield 2010 which requires a SPC/PFX and a PVK file to sign my files. I just got a GoDaddy Code Signing CERT but all they gave me was a SPC file. I right-clicked it and installed it in Windows 7. I assume the PVK file is somewhere on this system but I cannot find it using the Certificates MMC, etc. So how will I use this...

TFS MSBuild Strong name and code signing of assemblies.

I need to strong name and code sign my assemblies. I dont want to change anything in Visual Studio, all changes must be on the TFS Build server. Any know how I can do this? ...

Getting a Symbian Code-Signing Certificate as a Single Developer?

I'd like to contribute to Loadstone I can get the code to compile but self signing does not provide the necessary capabilities to install and run the code. All the sites for "free" Development certificates appear to be boarderline if not outright illegal. Since I'm not a company is there a way to get a development certificate I can use, ...

How do you create a self-signed certificate for use in object signing?

I am trying to create an object-signing certificate myself instead of paying Verisign or some other company hundreds of dollars. I am using linux (specifically 64bit OpenSUSE 11.1) so it would be best if I could create it in that environment. I have successfully created self-signed certificates for Apache to use for https connections usi...

Generate certificate for signing AIR app

How do I generate a self-signed certificate to sign an adobe AIR app? I'm using the maven flexmojos plugin. I've followed an openssl tutorial to generate a .p12, but now the mvn plugin /adt compiler is telling me that the certificate is not a X509 certificate. Thanks ...

Code signing didn't complain when I changed an exe file?

I purchased a code signing certificate and all looks well. When tested inside a clean Virtual PC OS I no longer get the "The Publisher could not be verified" message. So just for grins, using a hex editor, I change a few constants in the VB6 exe which I see on a form. And the VB 6 exe still runs wihout any error message. I thought th...