 | | From: | Martijn Laan | | Subject: | Re: Unkown Publisher - Digital Signature | | Date: | Fri, 17 Dec 2004 20:42:14 +0100 |
|
|
 | Hi,
Matthew Jones wrote:
> http://www.matthew-jones.com/articles/codesigning.html is my take on
> getting code signing to work, either low cost, or cheap.
I followed your instructions to convert my exported .pfx to an .spc and
..pvk and the resulting signed .exe is accepted by my XP but not on
Jordan's XP. This does not happen if I sign via de codesign GUI. Any
idea why? Also see the 'Digital Signatures' thread.
Greetings,
Martijn Laan
--
// Live Good. Do Right. Ride Hard.
//
// Inno Setup QuickStart Pack: http://www.jrsoftware.org/isdl.php#qsp
// My Inno Setup Extensions: http://isx.wintax.nl
|
|
| | From: | Martijn Laan | | Subject: | Re: Unkown Publisher - Digital Signature | | Date: | Fri, 17 Dec 2004 21:41:51 +0100 |
|
|
| Hi,
I wrote:
> I followed your instructions to convert my exported .pfx to an .spc and
> .pvk and the resulting signed .exe is accepted by my XP but not on
> Jordan's XP. This does not happen if I sign via de codesign GUI. Any
> idea why? Also see the 'Digital Signatures' thread.
Sorry, it way my fault, missed the "(be sure to check "Include all
certificates in the certification path if possible")" part in your
instructions :( With the new .pfx it now works fine.
Maybe you should make it bold face though :)
Greetings,
Martijn Laan
--
// Live Good. Do Right. Ride Hard.
//
// Inno Setup QuickStart Pack: http://www.jrsoftware.org/isdl.php#qsp
// My Inno Setup Extensions: http://isx.wintax.nl
|
|
| | From: | Matthew Jones | | Subject: | Re: Unkown Publisher - Digital Signature | | Date: | Mon, 20 Dec 2004 14:23 +0000 (GMT Standard Time) |
|
|
| > Maybe you should make it bold face though :)
Done.
/Matthew Jones/
|
|
| | From: | Matthew Jones | | Subject: | Re: Unkown Publisher - Digital Signature | | Date: | Sat, 18 Dec 2004 15:26 +0000 (GMT Standard Time) |
|
|
| I can't explain why the GUI/command line should make any difference.
Presumably checking the file Properties shows that both methods are
actually signed? What about the actual receiver machines - have they got
the same XP service pack and root certificates? (I don't know how to tell
which root certs are loaded!)
/Matthew Jones/
|
|
| | From: | Martijn Laan | | Subject: | Re: Unkown Publisher - Digital Signature | | Date: | Sat, 18 Dec 2004 18:21:39 +0100 |
|
|
| Hi,
Matthew Jones wrote:
> I can't explain why the GUI/command line should make any difference.
See my other message, I've fixed it in the meantime.
I think the problem was that on a clean XP SP2 Certum's intermediate
certificates ('Certum Level 1/2/3/4') aren't installed, it only has the
root certificate. Because I by accident didn't check the "Include all
certificates in the certification path if possible" option, the signed
..exe (presumably) didn't contain the intermediate certificate either,
causing the failure on Jordan's XP.
Greetings,
Martijn Laan
--
// Live Good. Do Right. Ride Hard.
//
// Inno Setup QuickStart Pack: http://www.jrsoftware.org/isdl.php#qsp
// My Inno Setup Extensions: http://isx.wintax.nl
|
|
