authenticode Questions

7

We need to dual sign our binaries with SHA1 and SHA2 using signtool.exe, our certificate supports 256-bit SHA2. Using the Windows 8 SDK's signtool: e.g.: signtool.exe sign /as /fd sha256 /t http...
Deluca asked 30/8, 2013 at 22:9

4

I am trying to write code that reads signatures (certificates) from DLLs or and EXEs. Most DLLs or EXEs have only one signature, and my code reads all certificates associated with this signature co...
Stuccowork asked 22/7, 2014 at 16:13

4

I have an Authenticode certificate (.pfx) which I use to sign executables. How can I configure Team Build so that it signs every single executable (.exe, .dll, ...) automatically while building th...
Fredenburg asked 28/8, 2009 at 13:44

1

I am looking for a method, using PowerShell only, to list the certificate chain for signed files. Specifically to get the Root certificate. As I need to get a list of which Non-Microsoft root cert...
Angst asked 23/1, 2015 at 0:30

2

Solved

There are many sites that explain how to run signtool.exe on a .pfx certificate file, which boil down to: signtool.exe sign /f mycert.pfx /p mypassword /t http://timestamp.server.com \ /d "My des...

4

Solved

Trying to get my head around authenticode code-signing and strong-naming. Am I right in thinking that if I code-sign an exe that references a few dlls (not strong named) that a malicious user coul...
Arrange asked 19/12, 2011 at 19:56

1

Solved

I wish to parse and display the contents of an Authenticode PKCS#7 signature as extracted from a Window PE binary's Security Directory. I can use OpenSSL to do this on the command line with "opens...
Tractate asked 9/10, 2014 at 15:11

1

Solved

I created a wix bundle which was working properly before codesigning. After googling and checking wix documentation, I got to know that I need to use insignia.exe for code signing the wix bundle. P...
Cyanosis asked 8/10, 2013 at 17:50

5

Solved

I am running SignTool with the following command: signtool sign /f keyfile.pfx /p mypassword pathToMsiFile.msi and i get the following error: SignTool Error: An unexpected internal error has occ...
Bacciferous asked 19/7, 2011 at 8:36

2

I am getting a code signing certificate for my open source projects. I have a couple of questions about them: Being a unregistered company that develops open source projects, is there a way...
Anny asked 18/4, 2012 at 3:57

1

Solved

All right, I'm not doing something right, and I need some help. Here's what's happening: I have a "real" Authenticode certificate from Comodo that I have paid for. I'm trying to sign and deploy a...
Leftwards asked 10/1, 2013 at 5:27

2

Solved

I'm trying to resolve WiX RemotePayload hashes, but I'm not sure how the CertificatePublicKey attribute is found. Take, for example, the .NET 4.0 Package definition from WiX 3.6 sources: <Fra...
Chokebore asked 18/9, 2012 at 15:41

1

Is it acceptable practice to install an Authenticode code signing certificate directly on a build server to create a production signed build? I’m looking for some resources on the net that suggest ...
Fetor asked 25/9, 2012 at 15:10

4

Solved

My company purchased a Driver Signing Certificate from Go Daddy. I used it to sign a simple INF file that is a driver for some of our USB devices that use Microsoft's usbser.sys. Everything seems t...
Pollypollyanna asked 6/9, 2012 at 0:24

2

Solved

In my C#/.NET application I have to check if a given executable is digitally signed (preferably without Exception testing.) Then I need to check if its certificate is valid (based on installed ro...
Countdown asked 15/10, 2011 at 20:6

2

I'm trying to write a C# program that verifies the digital signature of exe's. The exe's are signed with an authenticode certificate, and I want to detect tampering. I've been able to create a Sig...
Mcmanus asked 1/10, 2011 at 20:21

3

I'm using CAPICOM in a .NET 3.0 C# app to check an Authenticode signature on an exe file. I need to make sure that the certificate is listed as a Trusted Publisher. Using signedCode.Verify(true) wi...
Fca asked 27/3, 2009 at 10:6

2

Solved

It is a good practice to always sign executable files (exe, dll, ocx, etc.). On the other hand, with an open source project it may considered disregarding the contributions to the project from all ...
Emad asked 15/4, 2011 at 14:15

1

I have a C++ Windows app. I sign our installer and my executable, but I don't currently sign my DLLs (such as zlib1.dll). It is not a big deal to sign those as well, but can someone explain what th...
Waldenses asked 17/1, 2011 at 17:28

1

Solved

I am implementing an automatic update feature and need some advice on how to do this securely using best practices. I would like to use the downloaded file's Authenticode signature to verify that i...
Baynebridge asked 4/1, 2011 at 15:50

1

Solved

Having read about strong names in .NET here, for example, I have the following question: We have an Authenticode code signing certificate with which we sign all our EXE, DLL and MSI files. The ben...
Soporific asked 17/12, 2010 at 10:37

1

I'm getting a very odd result when running an executable that has been digitally signed. The executable was signed using signtool.exe using a proper level 2 code signing certificate (not self-gene...
Ovenbird asked 7/12, 2010 at 18:4

1

I feel like I'm missing something obvious here, but I don't see it written anywhere. I sign my executables using an Authenticode certificate, but as I've started to learn a bit more about it, I am...
Myxomatosis asked 13/7, 2010 at 20:34

1

Solved

I'm trying to sign an ActiveX control with a code signing certificate issued by Thawte. I was able to successfully sign the control using signtool.exe. When I look at the file properties, it says ...
Zipangu asked 11/5, 2010 at 20:32

2

Solved

I'm looking for the convenient signwizard in signtool.exe but cannot find it anymore in the Windows SDK 7.0. Is it in a separate tool now or is there only the CLI left?
Occultation asked 15/2, 2010 at 8:24

© 2022 - 2024 — McMap. All rights reserved.