PDA

View Full Version : Reminder: Check your Code-Signing Certificate Expiry Date! (May 05, 2009)



NewsArchive
05-05-2009, 01:41 AM
All,

Is your code-signing certificate due to expire? I would strongly suggest to
check this now! It is important you renew your certificate before the
expiry date. Once the certificate expired, you are unable to code-sign your
applications and/or installations!

Please note that Comodo does not send renewal reminders!

To avoid having to resign software every time your certificate expires, use
the timestamping service. When you sign code, a hash of your code will be
sent to Certification authority to be timestamped. This means that you will
not need to worry about re-signing code when your Digital ID expires.
Microsoft Authenticode allows you to timestamp your signed code so that
signatures will not expire when your certificate does.

As a service to our customers, we have partnered with Comodo, Inc., a
leading WebTrust Compliant Certification Authority, to offer Comodo's range
of Code Signing Certificates and Public Key Infrastructure (PKI) based
Secure Sockets Layer (SSL) certificates to qualified Lindersoft customers.
If your Verisign or Thawte certificate is due to expire soon, Lindersoft
customers can switch to a 3-Year Comodo certificate for just $200 instead of
$500. Do the math: a Verisign Code Signing Digital ID costs $1,295 for 3
years. A Thawte Code Signing Digital ID costs $549 for 2 years.

http://www.lindersoft.com/products_security_services.htm

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

SetupBuilder is installation -- "point. click. ship"

-- Official Comodo Code Signing and SSL Certificate Partner

NewsArchive
05-17-2009, 02:42 AM
I can only say - Really, really never forget that your certificate is
expiring.
My did, and when everything goes wrong (Don't use a Vista PC for ordering!),
it takes time.
It should be said, that the support from Comodo is only next to
Friderich's - THey simple continue untill they have found a solution.
In my case, we had to remake the certificate 3 times, and I have at lest 25
mails from support.

Best regards

Edvard Korsbæk

NewsArchive
05-17-2009, 02:43 AM
> I can only say - Really, really never forget that your certificate is
> expiring.
> My did, and when everything goes wrong (Don't use a Vista PC for
> ordering!), it takes time.
> It should be said, that the support from Comodo is only next to
> Friderich's - THey simple continue untill they have found a solution.
> In my case, we had to remake the certificate 3 times, and I have at lest
> 25 mails from support.

Thanks for sharing your experience with Comodo!

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

SetupBuilder is installation -- "point. click. ship"

-- Official Comodo Code Signing and SSL Certificate Partner

NewsArchive
05-17-2009, 02:43 AM
>> I can only say - Really, really never forget that your certificate is
>> expiring.
>> My did, and when everything goes wrong (Don't use a Vista PC for
>> ordering!), it takes time.
>> It should be said, that the support from Comodo is only next to
>> Friderich's - THey simple continue untill they have found a solution.
>> In my case, we had to remake the certificate 3 times, and I have at lest
>> 25 mails from support.
>
> Thanks for sharing your experience with Comodo!

Yes, a little less than two years ago (I ordered the 3 year discounted deal
offered through Lindersoft), I made ALL the classic mistakes,

started the order on Vista with FireFox - Deadly combination!

But, Comodo support was excellent - patiently working through each mistake
until success!

To resolve my problem - I used an older computer with W2K Pro and IE6
(actually had to restore W2K Pro from an OS CD, and had to fight some
network card problems to get the online working again! Ugh! :-D).

Comodo support was first rate throughout the process!

David

--
From David Troxell - Product Scope 7 - Encourager Software
Clarion Third Party Profile Exchange Online
http://encouragersoftware.com/profile/clarlinks.html
Profile Exchanges - www.encouragersoftware.com/profile/
http://www.profileexchanges.com/blog/

NewsArchive
05-17-2009, 02:44 AM
Hi David,

> started the order on Vista with FireFox - Deadly combination!

FF can be a complete PITA when dealing with some secure sites<g>

Best regards,

--
Arnór Baldvinsson - Icetips Alta LLC
Port Angeles, Washington
www.icetips.com - www.buildautomator.com

Icetips product subscriptions at http://www.icetips.com/subscribe.php

NewsArchive
05-17-2009, 02:45 AM
> Hi David,
>
>> started the order on Vista with FireFox - Deadly combination!
>
> FF can be a complete PITA when dealing with some secure sites<g>

Arnor,

Definitely - what thing Charles has instilled in me - you don't have to
like IE - just have some respect for it AND Test, Test, Test in it! :-D

AND, of course, you can be VERY limited as to certain MS sites if not using
IE - so I have made it a habit - MS Partner logon - use IE!

David

--
From David Troxell - Product Scope 7 - Encourager Software
Clarion Third Party Profile Exchange Online
http://encouragersoftware.com/profile/clarlinks.html
Profile Exchanges - www.encouragersoftware.com/profile/
http://www.profileexchanges.com/blog/

NewsArchive
05-17-2009, 02:46 AM
You guys were lucky. I made a mistake on the first order, and it never got
resolved.
I disagree on their support excellance. Maybe just for over sea's.

I was told to purchase a second one, which I did, and it worked. Then I
tried to get the refund.

Filed the support ticket, gave up after about a dozen emails over a couple
months, back and forth.
Spent a lot of time on the phone. They tell me to wait, they fixed it,
nothing happens,
repeat this process until you give up. Spam filters someplace between me
and them ate half
the emails. Can't turn them off. Then I call them again.

I finally gave up, ate the money and ended up paying $400 for 3 years, try
to tell myself its
still %20 savings. Never went back to even see if the ticket is still open.

Left a bad taste in my mouth.
Don't know if I can afford to try and renew it. What does that take?

I prefer to use the phone anymore, as their website sucks.
Using IE on XP by the way.

Bo

NewsArchive
05-17-2009, 02:48 AM
Hi Bo,

> You guys were lucky. I made a mistake on the first order, and it never got
> resolved.
> I disagree on their support excellance. Maybe just for over sea's.

I tend to agree. First time around I had to purchase twice because the
information on the order page was so sparse that it was impossible to figure
out what to do and I picked the wrong choice somewhere so I didn't get the
certificates and they couldn't help. But they did refund it right away, so
it wasn't a problem. Last time I bought (you don't really renew those
things) was a complete mess as they insisted on a phone number which I'd
never had for the company so I ended up getting a cellphone just to get a
certificate;) In the meantime I got emails from 5 different people about
what I needed to do - making no sense whatsoever. If they had told me they
were giving me _alternatives_ to using the phone number to verify it would
have helped a lot. They managed to find information on some corporate
database that was almost 10 years out of date and had wrong information even
for that<g> Unfortunately I had forgot what a mess it was so I only went
for a 1 year cert:(

Best regards,

--
Arnór Baldvinsson - Icetips Alta LLC
Port Angeles, Washington
www.icetips.com - www.buildautomator.com

Icetips product subscriptions at http://www.icetips.com/subscribe.php

NewsArchive
05-17-2009, 02:51 AM
I certainly hope my re-order process is that smooth. Getting with them the
first time was like pulling teeth with rusty pliers.

--
Russell B. Eggen
www.radfusion.com
Clarion developers: www.radfusion.com/dev.htm

NewsArchive
05-17-2009, 02:51 AM
> I certainly hope my re-order process is that smooth. Getting with them
> the first time was like pulling teeth with rusty pliers.

See the following very important reading: ;-)

Sticky: Don't order Comodo Certificate from a VISTA machine
http://www.lindersoft.com/forums/showthread.php?t=8279

Sticky: Firefox Comodo Code-signing Information
http://www.lindersoft.com/forums/showthread.php?t=9498

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

SetupBuilder is installation -- "point. click. ship"

-- Official Comodo Code Signing and SSL Certificate Partner

NewsArchive
05-17-2009, 02:53 AM
And they are important - If I had read that before, it would have been hours
instead of 3 weeks.

Never use Vista.
Only use Firefox if you like to see how clever you are.

Edvard Korsbæk

NewsArchive
05-17-2009, 02:54 AM
It wasn't that. I read (again) Jane's articles and your forum posts about
this. I had all the docs they required ready to go. Order process went
smooth. Then I got the emails saying they needed more docs, which I sent.
This went on for two days. I finally sent them a document they asked for
and they rejected it for being "too old". I replied that they never said
anything about a document being too old. I then went silent. Then as I was
thinking about following up, I got an email saying my cert was ready.

But those two days of going round and round were a complete waste of my
time. So my advice to anyone else is that you read the requirements Comodo
asks for (you'll need a minimum of two documents and they are clear as to
what these are). If they challenge you, inform them they have what they
originally asked for and don't accept their arbitraries.

Other than that, it went real smooth <g>

--
Russell B. Eggen
www.radfusion.com
Clarion developers: www.radfusion.com/dev.htm

NewsArchive
05-17-2009, 02:55 AM
WebTrust "agencies" have to follow very, very strict rules now. I can tell
you that I know quite a few developers who have NOT received their
certificate. Even if they previously had a certificate. And then you can't
code-sign applications and installations any longer. Nightmare!

My advice is, never start a debate on general principles with Comodo,
VeriSign, etc. In most cases you lose. Code-signing certificates are a
money making machine -- 500 certificate requests *per hour* are normal.
WebTrust agencies don't need you, you need them.

IMO, Comodo is by far the best Certificate Authority. Very good products,
good support.

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

SetupBuilder is installation -- "point. click. ship"

-- Official Comodo Code Signing and SSL Certificate Partner

NewsArchive
05-17-2009, 02:56 AM
Very true. You must learn to pick your battles <g>. Once I pointed out to
them that they had in their possession more than what they asked for, I got
my cert.

--
Russell B. Eggen
www.radfusion.com
Clarion developers: www.radfusion.com/dev.htm

NewsArchive
05-17-2009, 02:56 AM
> Very true. You must learn to pick your battles <g>. Once I pointed out
> to them that they had in their possession more than what they asked for, I
> got my cert.

I started a debate on general principles with VeriSign last year (we needed
a VeriSign certificate for Microsoft Logo tests) and we did NOT receive a
certificate. But one month after they denied our request for a certificate,
we received an offer to *sell* VeriSign certificates. Is that strange or
not? <g>

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

SetupBuilder is installation -- "point. click. ship"

-- Official Comodo Code Signing and SSL Certificate Partner

NewsArchive
05-17-2009, 02:57 AM
Sounds like their left hand is not aware of the right <g>.

I can certainly understand rigid standards, this is dealing with a company's
security as well as their customers. Where it goes pear shaped is when they
move the goal posts in the middle of the game! Unless that is a security
standard <g>.

Reminds me of the old saying that in order to get a bank loan, you must
first prove you don't need it <vbg>.

--
Russell B. Eggen
www.radfusion.com
Clarion developers: www.radfusion.com/dev.htm

NewsArchive
05-17-2009, 02:58 AM
Russ

Never would have crossed my mind to order a certificate with rusty pliers - would have thought Internet explore was better no ? ;) ;) ;)

Cordialement - Best regards
Jean-Pierre GUTSATZ

CGF

DMC - Data Management Center
A tool to let you Migrate Import Export Transfer your Data
www.dmc-fr.com
Certified by Microsoft : "Works with Vista" &
"Works with Windows Server 2008"

NewsArchive
05-17-2009, 02:59 AM
In addition to Friedrich's links, you might get some help from my
re-certificating experience.
http://www.clarionmag.com/cmag/v11/v11n01certificate.html

Jane Fleming

NewsArchive
05-17-2009, 03:00 AM
See my reply to Friedrich <G>

--
Russell B. Eggen
www.radfusion.com
Clarion developers: www.radfusion.com/dev.htm