Codesigning permission of 3rd-party DLLs

[NewsArchive]

Hello all,

if I understand correctly not only EXEs need to be codesigned but also any
DLL etc which is delivered withthe install.

Am I permitted to codesign such a 3rd-party file?

Or do the publisher has to do and deliver a signed DLL?

Or maybe it needs to be signed all withthe same certificate?

Or do I see ghosts?

<sigh>




--
Grüße / Regards
Wolfgang Orth

http://www.odata.de



Erstellt mit Operas revolutionärem E-Mail-Modul: http://www.opera.com/mail/

[NewsArchive]

ghosts wisperers ... :)

normally suppliers are to deliver codesigned .....but if of course you can
sign them after a 'nice 'email perhaps <g>

--
Thank you

Cordialement - Best regards
Jean-Pierre GUTSATZ

CGF

DMC - Data Management Center - A tool to let you Migrate Import Export
Transfer all your Data very easily
www.dmc-fr.com
Certified by Microsoft : "Works with Vista" & "Works with Windows Server
2008"

[NewsArchive]

> ghosts wisperers ... :)
>
> normally suppliers are to deliver codesigned .....but if of course you can
> sign them after a 'nice 'email perhaps <g>
>
Do you actually have to code sign the dlls? or just the exes?


--
Jorge Alejandro Lavera, Huenuleufu Development SRL
www.ClarionTemplates.com
www.ClarionDevelopment.com

[NewsArchive]

>
> Do you actually have to code sign the dlls? or just the exes?
>

All .exe, .dll, .ocx, etc. should be code-signed.

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

[NewsArchive]

>>
>> Do you actually have to code sign the dlls? or just the exes?
>>
>
> All .exe, .dll, .ocx, etc. should be code-signed.

What could happen if not? I always signed the exes only, and had no problems
so far.


--
Jorge Alejandro Lavera, Huenuleufu Development SRL
www.ClarionTemplates.com
www.ClarionDevelopment.com

[NewsArchive]

>> All .exe, .dll, .ocx, etc. should be code-signed.
>
> What could happen if not? I always signed the exes only, and had no
> problems so far.

You (or your customers) cannot pass any Microsoft certification test if not
all application files (exe, dll, etc.) are code-signed.

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

[NewsArchive]

>>> All .exe, .dll, .ocx, etc. should be code-signed.
>>
>> What could happen if not? I always signed the exes only, and had no
>> problems so far.
>
> You (or your customers) cannot pass any Microsoft certification test if
> not all application files (exe, dll, etc.) are code-signed.

Ah, that is the reason? I thought it had something to do with the UAC in
Vosta (Sorry, I meant Vista, jeje).
Having the exes signed, it is easy enough with SetupBuilder to sign the dlls
as well. Thank you!


--
Jorge Alejandro Lavera, Huenuleufu Development SRL
www.ClarionTemplates.com
www.ClarionDevelopment.com

[NewsArchive]

Hi Friedrich,

> You (or your customers) cannot pass any Microsoft certification test if not
> all application files (exe, dll, etc.) are code-signed.

Can Clarion exes pass MS Certifications?

Best regards,

--
Arnór Baldvinsson - Icetips Creative, Inc.
Port Angeles, Washington
www.icetips.com - www.buildautomator.com

Icetips product subscriptions at http://www.icetips.com/subscribe.php

[NewsArchive]

Hi Arnór,

>> You (or your customers) cannot pass any Microsoft certification test if
>> not all application files (exe, dll, etc.) are code-signed.
>
> Can Clarion exes pass MS Certifications?

A Clarion application can definitely pass "Works with Windows Vista" and
"Works with Windows 2008" certification tests. I am not sure if a Clarion
app can pass "Certified for Windows Vista" and "Certified for Windows Server
2008".

By the way, a few months ago, one of our customers got his "Certified for
Vista" logo (their program is written in VS VC++). In total, the process
took nine weeks and several rewrites. The first four submissions of the
program did not pass the test. They paid $14,500 for the certification
process.

Jean-Pierre pushed SetupBuilder through the "Works with Windows Vista" and
"Works with Windows 2008" certification process (what a nightmare!)

See certification logos at:
http://www.lindersoft.com/products_setupbuilder_dev.htm

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

[NewsArchive]

hehe .... at half price that makes it ... multiplied by two .... divided by
x nightmares ..... substract y tons of emails ..... square root all this
with zillions of phone calls .....<vbg>

--
Thank you

Cordialement - Best regards
Jean-Pierre GUTSATZ

CGF

DMC - Data Management Center - A tool to let you Migrate Import Export
Transfer all your Data very easily
www.dmc-fr.com
Certified by Microsoft : "Works with Vista" & "Works with Windows Server
2008"

[NewsArchive]

Arnor,

Traveling made you forget .... :) ?

DMC is Ms Certified works with Vista and Works with Windows server 2008
...... <g>

--
Thank you

Cordialement - Best regards
Jean-Pierre GUTSATZ

CGF

DMC - Data Management Center - A tool to let you Migrate Import Export
Transfer all your Data very easily
www.dmc-fr.com
Certified by Microsoft : "Works with Vista" & "Works with Windows Server
2008"

[NewsArchive]

you would have received a "nice" email from me if that was the case when I
applied for ceritification for example.....

plus as after all if we have to live in M$ world ... we might as well go all
the way ......

I will not comment on this last sentence portion of phrase as some might
think I am an old pervert <bg>

--
Thank you

Cordialement - Best regards
Jean-Pierre GUTSATZ

CGF

DMC - Data Management Center - A tool to let you Migrate Import Export
Transfer all your Data very easily
www.dmc-fr.com
Certified by Microsoft : "Works with Vista" & "Works with Windows Server
2008"

[NewsArchive]

Bonjour Friedrich,

With Clarion 6 it is indeed impossible to get a Certification 'certified for
......' because Clarion 6 uses old deprectaed API's in the TRL if I
understood well

I will try later this year to see if a .NET exe can pass the basic tests
with M$ ...... and let you all know of course (aiming at getting DMC
certified for SQL 2008 ....)
(one of the reasons why I asked SV what hapened to CSP who wanted to switch
....but still no answer)

--
Thank you

Cordialement - Best regards
Jean-Pierre GUTSATZ

CGF

DMC - Data Management Center - A tool to let you Migrate Import Export
Transfer all your Data very easily
www.dmc-fr.com
Certified by Microsoft : "Works with Vista" & "Works with Windows Server
2008"

[NewsArchive]

Hi Jean-Pierre,

> With Clarion 6 it is indeed impossible to get a Certification 'certified
> for ......' because Clarion 6 uses old deprectaed API's in the TRL if I
> understood well

The problem is that, without those APIs, Clarion could not provide backward
compatibility to older operating systems. Even with Visual Studio VC++,
it's not easy to develop an application that passes the test.

> I will try later this year to see if a .NET exe can pass the basic tests
> with M$ ...... and let you all know of course (aiming at getting DMC
> certified for SQL 2008 ....)
> (one of the reasons why I asked SV what hapened to CSP who wanted to
> switch ....but still no answer)

..NET executables should not cause any problems. But I will never ever in my
life go through a certification test again, so... <bg>

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

[NewsArchive]

you do NOT want to rewrite SB in NET and get it certified then ??
I do not understand you at all <HUGE GRIN> ........

I will try IF I can get DMC ported to .NET .....and IF a NET exe passes the
basic tests .....
I must be stupid .....just wanting a logo......but also figthing for the
Clarion world to be recognized .....with as you know a LOT of help from SV
....... (ok rewriting a small part of the RTL just for this is maybe too much
asking today) :(

a switch
a switch
a switch

please SV ..... it is for YOUR own benefit ( recognition means more big
companies and that means more interest in the product and that means more
sales for you etc etc ... )

--
Thank you

Cordialement - Best regards
Jean-Pierre GUTSATZ

CGF

DMC - Data Management Center - A tool to let you Migrate Import Export
Transfer all your Data very easily
www.dmc-fr.com
Certified by Microsoft : "Works with Vista" & "Works with Windows Server
2008"

[NewsArchive]

> you do NOT want to rewrite SB in NET and get it certified then ??

NO! <g>

> I do not understand you at all <HUGE GRIN> ........

<ROFL>

> I will try IF I can get DMC ported to .NET .....and IF a NET exe passes
> the basic tests .....
> I must be stupid .....just wanting a logo......but also figthing for the
> Clarion world to be recognized .....with as you know a LOT of help from SV
> ....... (ok rewriting a small part of the RTL just for this is maybe too
> much asking today) :(
>
> a switch
> a switch
> a switch
>
> please SV ..... it is for YOUR own benefit ( recognition means more big
> companies and that means more interest in the product and that means more
> sales for you etc etc ... )

IMO, such a RTL change would *not* be a trivial task - it's a very very very
complex thing! This kind of modifications in the C6 RTL are an "open-heart
surgery" which could result in unknown side effects.

And think of this: if you try to get a "Certified for Whatever" logo, you
can NOT use your maintenance subscription protection, you can NOT use your
cool web update, and you can NOT use your ultra-fast .exe installer any
longer. All this disadvantages (and $10,000+ less in your pockets) just to
get a stupid logo??? <g> Don't do it ;-)

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

[NewsArchive]

I was not thinking of C6 but of C7 but ....

I do not understand why no more SB MP etc when certified for ??

Anyway if I do it it will ceretainely be 'within' a free Microsoft 'plan' as
I have no way of spedning 10k for the test

--
Thank you

Cordialement - Best regards
Jean-Pierre GUTSATZ

CGF

DMC - Data Management Center - A tool to let you Migrate Import Export
Transfer all your Data very easily
www.dmc-fr.com
Certified by Microsoft : "Works with Vista" & "Works with Windows Server
2008"

[NewsArchive]

>Jean-Pierre pushed SetupBuilder through the "Works with Windows Vista" and
>"Works with Windows 2008" certification process (what a nightmare!)

Was it worth the effort? Is it just for marketing or are there some
technical advantages?

Steve

--
Neural Planner Software Ltd http://www.NPSL1.com
JustNN. Just Neural Networks. http://www.justnn.com
EasyNN-plus. Neural Networks plus. http://www.easynn.com
SwingNN. Forecast with Neural Network. http://www.swingnn.com

[NewsArchive]

>
> I was not thinking of C6 but of C7 but ....
>

Because the C7 RTL is an "enhanced" C6 RTL (evolution of the kernel), it's
also an "open-heart surgery" and would definitely (IMO) result in negative
side effects (e.g. with regard to backward compatibility). I am not saying
that it can't be done. But it's not a trivial task.

>
> I do not understand why no more SB MP etc when certified for ??
>

Because you have to deploy it as an MSI and this technology does NOT support
serial numbers, maintenance keys, passwords, web updates, etc. And on top
of this, you can use Microsoft tools to extract all files (free-of-charge)
out of your MSI installer.

> Anyway if I do it it will ceretainely be 'within' a free Microsoft 'plan'
> as I have no way of spedning 10k for the test

Even the "free" test run costs nerves <g> and so much valuable time out of
your busy schedules...

Friedrich

[NewsArchive]

I did not know the certified for requires exclusively an MSI installer type
......will have to check that when the time comes :)

Thanks for pointing this out

--
Thank you

Cordialement - Best regards
Jean-Pierre GUTSATZ

CGF

DMC - Data Management Center - A tool to let you Migrate Import Export
Transfer all your Data very easily
www.dmc-fr.com
Certified by Microsoft : "Works with Vista" & "Works with Windows Server
2008"

[NewsArchive]

>I did not know the certified for requires exclusively an MSI installer type
>......will have to check that when the time comes :)
>
> Thanks for pointing this out

:)

You can then use again SetupBuilder (because SB7 will provide an option to
generate MSI) but you'll loose all the cool exclusive SetupBuilder features.
That is flexibility, power, performance, security, etc.

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

[NewsArchive]

And as I will NOT loose all the perfect Setup Builder features .... :)

--
Thank you

Cordialement - Best regards
Jean-Pierre GUTSATZ

CGF

DMC - Data Management Center - A tool to let you Migrate Import Export
Transfer all your Data very easily
www.dmc-fr.com
Certified by Microsoft : "Works with Vista" & "Works with Windows Server
2008"

[NewsArchive]

>
> And as I will NOT loose all the perfect Setup Builder features .... :)
>

;-)

Friedrich

[NewsArchive]

Hi Steve,

>>Jean-Pierre pushed SetupBuilder through the "Works with Windows Vista" and
>>"Works with Windows 2008" certification process (what a nightmare!)
>
> Was it worth the effort? Is it just for marketing or are there some
> technical advantages?

IMO, it was not worth the effort (for SetupBuilder).

Microsoft says:

"The Windows Logo Program will help partners meet customer needs and
expectations by delivering a product that meets Microsoft Windows standards
for compatibility, reliability, and security. Qualifying for a Windows logo
will enable you to differentiate your products with the clear, trusted
promise of a great Microsoft Windows computing experience."

I think it's interesting to note that Microsoft does not handle the
certification process. It's completely outsourced to 3rd party companies in
China and India. You send the money and product, and they check if you are
following specific rules.

And of course, you have to re-submit your program (and pay again) if you
have a new version available or if there was a major change.

Friedrich

[NewsArchive]

It sure does not look like its worth the effort just for bragging rights.

Then again, I don't know the PR value of that logo. There are still a lot
of MS jokes going around <g>.

--
Russell B. Eggen
www.radfusion.com
Skype Clarion chat: http://tinyurl.com/2273lm

[NewsArchive]

"Real World" - scene 1 - take 1 :

"Hello Sales,
I saw on your site that you sell a software which we might be interested in.
Will our data be safe with it as we cannot afford loosing any of course ?"

"Real World" - scene 1 - take 1 :

"Hello Sales,
I saw on your site that you sell a software which we are interested in.
I seee that it is Cerified by Microsoft so I am sure our data be safe with
it as we cannot afford loosing any of course !"

To brag and to joke is always easy ......

"Let them wonder ..... the moment they talk about you !"

<g>

Otherwise as we both said it is not worth the effort for many applications.

--
Thank you

Cordialement - Best regards
Jean-Pierre GUTSATZ

CGF

DMC - Data Management Center - A tool to let you Migrate Import Export
Transfer all your Data very easily
www.dmc-fr.com
Certified by Microsoft : "Works with Vista" & "Works with Windows Server
2008"

[NewsArchive]

I can ensure that data is not lost because of *not* being logo certified.

--
Russell B. Eggen
www.radfusion.com
Skype Clarion chat: http://tinyurl.com/2273lm

[NewsArchive]

Of course <VBG>
that was just a small piece of humour build on man's stupidity .....

And it certinely is NOT because an app is certified that it is good.......
--
Thank you

Cordialement - Best regards
Jean-Pierre GUTSATZ

CGF

DMC - Data Management Center - A tool to let you Migrate Import Export
Transfer all your Data very easily
www.dmc-fr.com
Certified by Microsoft : "Works with Vista" & "Works with Windows Server
2008"

[NewsArchive]

> Then again, I don't know the PR value of that logo.

Depends on the market.
--

Mark Riffey
http://www.rescuemarketing.com/blog/
Guy Kawasaki & the Wall Street
Journal staff read it, maybe you should too.

[NewsArchive]

True dat.

I suppose if a major contract was riding on it, I'd be more keen.

--
Russell B. Eggen
www.radfusion.com
Skype Clarion chat: http://tinyurl.com/2273lm

[NewsArchive]

I would say that all depends on your application

IF it is 'sensible' to the market then it is worth it (commercialy)
But as Friedrich said all the rest it is not worth it

--
Thank you

Cordialement - Best regards
Jean-Pierre GUTSATZ

CGF

DMC - Data Management Center - A tool to let you Migrate Import Export
Transfer all your Data very easily
www.dmc-fr.com
Certified by Microsoft : "Works with Vista" & "Works with Windows Server
2008"