|
|
 | | From: | Martijn Laan | | Subject: | Re: Digital signatures | | Date: | Fri, 17 Dec 2004 20:35:51 +0100 |
|
|
 | Hi,
Jernej Simon+AQ0-i+AQ0- wrote:
> If you're developing open-source programs, you can get a free certificate
> (which has it's root cert in MS's store) at .
I saw you're using one to sign your GIMP installer. May I ask how you
signed it? Via the signcode GUI or via its command line?
I'm asking because if I do it via the command line using a .spc and .pvk
file created as instructed on
http://www.matthew-jones.com/articles/codesigning.html, the signed .exe
is accepted by my XP but not on Jordan's XP. Signed via the GUI and the
certificate taken from the registry, it works on both our systems.
Thanks for any light you might be able to shed on this :)
Greetings,
Martijn Laan
--
// Live Good. Do Right. Ride Hard.
//
// Inno Setup QuickStart Pack: http://www.jrsoftware.org/isdl.php+ACM-qsp
// My Inno Setup Extensions: http://isx.wintax.nl
|
|
| | From: | Jernej Simon+AQ0-i+AQ0- | | Subject: | Re: Digital signatures | | Date: | Fri, 17 Dec 2004 21:30:09 +0100 |
|
|
| on Fri, 17 Dec 2004 20:35:51 +-0100, Martijn Laan wrote:
> I saw you're using one to sign your GIMP installer. May I ask how you
> signed it? Via the signcode GUI or via its command line?
Via the signcode GUI. I'm planning to use the command-line at some point,
but I haven't gotten to it yet.
> I'm asking because if I do it via the command line using a .spc and .pvk
> file created as instructed on
> http://www.matthew-jones.com/articles/codesigning.html, the signed .exe
> is accepted by my XP but not on Jordan's XP. Signed via the GUI and the
> certificate taken from the registry, it works on both our systems.
Interesting, what does the Digital signature tab in the Properties say?
--
begin .sig
< Jernej Simon+AQ0-i+AQ0- ><>+Jco-<>< http://www2.arnes.si/~sopjsimo/ >
< jernej simoncic at isg si >< http://deepthought.ena.si/ >
end
|
|
| | From: | Martijn Laan | | Subject: | Re: Digital signatures | | Date: | Fri, 17 Dec 2004 21:40:23 +0100 |
|
|
| Hi,
Jernej Simon+AQ0-i+AQ0- wrote:
> Via the signcode GUI. I'm planning to use the command-line at some point,
> but I haven't gotten to it yet.
Ok, thanks.
In the meantime I've managed to get it working on Jordan's system via
the command line too. I missed the "(be sure to check "Include all
certificates in the certification path if possible")" part on Matthew's
page. And yes, that makes me feel stupid :)
>>I'm asking because if I do it via the command line using a .spc and .pvk
>>file created as instructed on
>>http://www.matthew-jones.com/articles/codesigning.html, the signed .exe
>> is accepted by my XP but not on Jordan's XP. Signed via the GUI and the
>>certificate taken from the registry, it works on both our systems.
>
> Interesting, what does the Digital signature tab in the Properties say?
It all looked fine.
Greetings,
Martijn Laan
--
// Live Good. Do Right. Ride Hard.
//
// Inno Setup QuickStart Pack: http://www.jrsoftware.org/isdl.php+ACM-qsp
// My Inno Setup Extensions: http://isx.wintax.nl
|
|
|
