code-signing

How important is it to digitally sign our executables?

We produce a content management system. It's a DB-based system, used only by businesses and organizations, and never downloadable from the Internet. I.e., it's not the kind of software someone might stumble upon and wonder what it is and whether it's safe to run. Over the 20+ years our system is being sold, it's executables have never be...

How to debug delay signed silverlight assemblies?

Our .Net 3.5 projects are delay signed and are registred with sn -Vr to allow debugging these assemblies on dev machines. Recently we ported some projects to Silverlight 3.0 and found out that sn -Vr won't allow to execute a delay signed silverlight assembly through iexplorer. Is there a way to execute a delay signed silverlight applic...

How many applications can be signed with single key ?

Have checked out https://www.blackberry.com/SignedKeys/ How many applications I can sign with this registration ? ...

How to set 'Publisher' in a .NET ClickOnce application

I'm publishing a .NET ClickOnce application and when the user installs it the Publisher is set as Unknown Publisher (see below). What do I need to do to change this field? Do I need a valid SSL certificate? ...

What certificate do I need for code signing?

I'm trying to sign a ClickOnce .NET Application. I have a SSL cert that I use on a website, but I'm thinking that it is not up to the job. When I select the cert in Visual Studio I get an messsage box saying 'The selected certificate is not valid for code signing. Choose another certificate file'. The cert details look like this: whe...

iPhone Static Library Code Signing Issue

I have a static library (SL) that can be build with "Debug" as the active target but not with "Distribution". I have set "Don't code sign" in the "Edit Project Settings" window but still get an error saying that the SL cannot be code signed. Isn't that strange? I'm using Xcode 3.2.1. Has anyone had the same issue and knows how to resolve...

Do "beta" apps installed on iPod expire when their provisioning certificate does?

I have installed an app on my iPod touch. Will this app expire when the provisioning certificate does? EDIT: I am the developer in this case. I installed it using XCode. I used a development provisioning profile not a distribution one. Does this change anything? ...

How do I export a PFX Code Signing Key to SPC and PVK under Windows 7?

I have a code signing key in PFX format that I need to export into SPC and PVK files. I tried to install the OpenSSL from Shining light but the install fails under Windows 7. http://www.shininglightpro.com/products/Win32OpenSSL.html Here are the instructions I am using from Comodo as a basis: https://support.comodo.com/index.php?_m=kn...

"Invalid provider type specified" when signing clickonce manifest in VS2008

I have a certificate issued by a CA on our intranet (it's a V3 sha1 pfx file). When I use this in the signing part of my clickonce (vsto addin) project, I get the error: C:\Program Files (x86)\MSBuild\Microsoft\VisualStudio\v9.0\OfficeTools\Microsoft.VisualStudio.Tools.Office.Office2007.targets(250,9): error MSB3482: An error occurred ...

Where do you store the private key for your code signing certificate?

I recently acquired a code signing certificate for my employer, but I am not the InstallShield developer who will sign the binaries before distribution. I know I can export the certificate along with its private key, but where do I store it so the InstallShield developer can install it on his machine? Should I remove it from my machine o...

Delphi app manifest file problems under WinXP and Win7

My last question "List service and services status under Win-7" made me start working on a solution that gives my app the admin privileges under Windows Vista onward based on a .manifest file. I was not sure about continue the previous question with this matter since they are not the same so here is another question: My app now works f...

how many types of code signing certificates do I need?

in Canada, website SSL certificates can be had for as low as US$10. unfortunately, code signing certificates cost about 10 time as much, one website mentions Vista compatibility ... this seems strange because my assumption is they must support XP, Vista, Windows 7, Server 2003, and Server 2008 or they would be useless. https://secure...

Permissions error for a signed Java applet when including external JAR files

I have a signed Java applet. And it works fine. But now I have to integrate some 3rd party JAR files with it. When I test it from Eclipse, the whole thing works correctly. But when I test it as an applet, it gives me a java.security.AccessControlException: access denied (java.io.FilePermission ...) I thought this was because those 3rd p...

Find out if assembly is signed with Authenticode

I use an assembly of a 3rd party vendor. In an older version this assembly used authenticode. This caused the assembly loading to last quiet long. The developer of the vendor told me that the new version is not signed with authenticode. How can I check if this is true. On my development machine the assembly loading was quiet fast. Only ...

Automatically install and launch a code-signed application from Safari

Is it possible and if so what are the steps necessary to package (or build) a Mac OS X application and code-sign it so that it can be downloaded with Safari and automatically launch? ... possibly after the user responds to some sort of dialog explaining that it is a signed application and the publisher has been verified. An example of t...

How to sign setup with .crt file?

I've got a Comodo certificate to sign my application files with the appropriate publisher (that'll be me). But how do I sign my installation to prevent those triple "are you sure?" UAC dialogs? Am using the Visual Studio (2008) setup project, no third party tools. ...

How can I programmatically obtain the company info used to digitally sign an assembly in .NET?

As a means of simple security, I was previously checking the digital signature of a downloaded update package for my program against its public key to ensure that it originated from me. However, as I'm using cheap code signing certs (Tucows), I am unable to renew an existing cert and therefore the keys change every time I need to renew. ...

iphone: the executable was signed with invalid entitlements

I'm trying to install my iphone app on my device for testing and whenever I try to build it I get: The executable was signed with invalid entitlements The entitlements specificed in your application's Code Signing Entitlements do not match those specified in your provisioning profile. Now I've tried adding an Entitleme...

When/why does Internet Explorer block installation of a (signed) ActiveX control?

When the user visits a page that contains a signed ActiveX control that has never been seen before, I'd expect IE to ask the user for permission to install the control. But sometimes IE puts up a security warning instead. For example, consider this site, which has a test control: http://www.pcpitstop.com/testax.asp I'd expect to get th...

How do I use signtool.exe correctly in hudson running as a service?

I just purchased a code signing cert (MS authenticode) from THAWTE and have installed it apparently on my build machine. I am logged in as a user and when I open a cmd prompt I can sign EXEs using the cert with signtool.exe. Unfortunately this same command line does not work in the hudson process that is running on the machine. the er...