code-signing

Does signing Java ME MIDlet by a certificate from VeriSign help avoid security warnings?

I was sure for a long time that the answer is yes. But after I've read this article: http://javablog.co.uk/2007/08/09/how-midlet-signing-is-killing-j2me/ (especially "How MIDlet signing used to be" section), I was not sure. I'm developing a Java ME application and my goal is to get rid of all those security warnings about network acces...

application not supported error while installing signed app

Hi I signed the application and trying to install on Nokia 5000 giving error "Application not supported". and failing download of application. I used the MIDP 2.0 and have given following application permission MIDlet-Permissions: javax.microedition.pim.ContactList.read, javax.microedition.io.Connector.http, javax.microedition.io.Conn...

How do I sign exes and dlls with my code signing certificate

(I purchased a code signing cert from Thawte and have been going out of my mind with frustration at the whole process. What I have from them are: .spc / .p7b file .pvk file (NOTE I do not have a pfx file from them. God knows why, but I have been fighting with their tech support for a week) In any case I find "help" links on their ...

Android: how to share code between projects signed with the same certificate

In Android documentation concerning code signing we can read: "By signing multiple applications with the same certificate and using signature-based permissions checks, your applications can share code and data in a secure manner." How exactly such code sharing can be done? Is it possible to release main application and multiple exchange...

Why is my code signing (MS authenticode) verification failing?

I posted this question and have a freshly minted code signing cert from Thawte. I followed the instructions (or so I thought) and the code signing claims to succeed, however when I try to verify the tool shows an error. The results from the verification step seem to show it is correct, however there is an error and no explanation wha...

Visual Studio 2010 Assembly Signing: An attempt was made to reference a token that does not exist

I'm trying to sign an assembly in Visual Studio 2010 with our PFX file, after I enter the password for the private key I get "An attempt was made to reference a token that does not exist" ...

Strong Signing, and Updating A Referencing Assembly

Hi, I have two, third party assemblies: Foo.dll and ReferencesFoo.dll As noted, ReferencesFoo.dll is an assembly that has a reference to Foo.dll For my application, I need to resign these assemblies. I use ildasm/ilasm in combination along with a signing key to resign them, however, ReferencesFoo.dll still contains (in it's manifes...

Cheap windows driver signing for 64 bit Windows 7

I need to install the libusb-win32 driver on Windows 7 64 bit machines. This driver is open source so it is not digitally signed so I want to do this my self but I wonder if this can be done WITHOUT paying lot of money. Is it possible to use a certificate which is NOT signed by Verisign or GlobalSign? Maybe self-signed or by using StartS...

Calling CryptUIWizDigitalSign from .NET on x64

I am trying to digitally sign files using the CryptUIWizDigitalSign function from a .NET 2.0 application compiled to AnyCPU. The call works fine when running on x86 but fails on x64, it also works on an x64 OS when compiled to x86. Any idea on how to better marshall or call from x64? The Win32exception returned is "Error encountered d...

Alternative timestamping services for authenticode

We perform code signing and timestamping for all our production builds. Occasionally (usually when we are about to RTM (!) ) the timestamp server at verisign ("http://timestamp.verisign.com/scripts/timstamp.dll") decides to go offline intermittently. Anyone got any suggestions as to what do do in this case? Does the timestamp server h...

How can I test my iphone app on actual device?

Possible Duplicate: How can I deploy an iPhone Application from Xcode to real iPhone device Possible Duplicate: How can I deploy an iPhone Application from Xcode to real iPhone device Is there any other way rather than pay $99 and get the keypair? 3.1.3 device, 3.2.2/3.2 XCode/sdk ...

Porting iPhone app to iPad fails to sign?

I am able to create a new application profile targeted for my iPad, however, when I convert from iPhone to "Universal" device, I am getting an error in signing. [BEROR]Code Sign error: a valid provisioning profile matching the application's Identifier 'rfc1034identifier' could not be found Also note: I am able to run it in the simulat...

What's the difference between a keystore and a private key in the context of application signing

The question is in the title. ...

Do I need to sign my ClickOnce app in order to be able to execute it from other PCs?

Do I need to sign my ClickOnce app in order to be able to execute it from other PCs? I'm trying to execute the app from another PCs and is not possible. I can't do it. Not even on my machine unless I create a test certificate with visual studio. ...

Signing a managed assembly that references an unmanaged assembly

I'm trying to sign a .net assembly with Visual Studio (2010). On the properties page for the project, I selected the Signing tab, and checked "sign the assembly" and provided a strong name key file. The problem is that this project references another -- unmanaged project. When I try to build the .net assembly, I get the message: "Asse...

Driver proxy to avoid repeated code signing on Windows

Drivers on Windows should be signed and submitted to Microsoft for code signing and this is a requirement for 64 bit systems. The problem is that, when you have to update the driver, you have to submit it again, once for every release. Is possible to build some kind of proxy or shim driver so that I have to sign and submit it only once,...

Why do WinVerifyTrust and sigcheck disagree about whether a file has a signature?

Hi, I've used the WinVerifyTrust example from here, but I'm finding that it is getting a TRUST_E_NOSIGNATURE for some files that SysInternals sigcheck reports as signed. For example, c:\windows\system32\mfc42.dll is reported by WinVerifyTrust as signed, but c:\windows\system32\mfc42u.dll is reported as unsigned -- sigcheck reports both...

Android app ad-hoc distribution and code signing

Is there a way to code-sign (to allow it to open only on a device with specific ID) your Android app when using ad-hoc distribution (sending app to testers or clients as a subcontractor)? I know I can share apk file pretty easily, but what if I don't want other people to redistribute the app before it is ready? I don't want testers to b...

Unable to sign iPhone app with distribution certificate

I have struggled every step of the way with the process of submitting to the appstore. I am now at the point where it asked if I wanted to use the distibution certificate I have in Xcode. I selected yes and I get an error as below. What is the problem with this? please help. I have stuggled more to setup this process than to develop my ...

How to make an Ant task to sign and pack200 all my JAR files?

My JAR files must be signed for a webstart application. It would be nice to also have them packed to minimize the download time. I'm trying to configure an Ant task to automatically do it during the deploy of the application. Since the pack process reorganizes the jar internal structure invalidating the signature, the Pack200 documentati...