Code Signing Issue - My exe is not signed

[NewsArchive]

I have setup SB7 to code sign and it is signing the install & uninstall
programs, but my app.exe is not signed. I'm not using PFX, don't even
know what it is. Am I missing a switch?

Thank you,
David

SB7.0.2712
C7
Win7 x64

[NewsArchive]

Are you putting in the correct path to your code-signing credentials and the
correct password in the "#code-sign application" script element that you're
using to sign your app?

Do you get a code-signing error when the script runs?

As for knowing what a PFX is, I'd suggest downloading the SetupBuilder
example files.
http://www.lindersoft.com/downloads_licensed.htm

The "Learning SetupBuilder" documentation that comes with that download has
some explanation of PFX files and code-signing in general.

Jane

[NewsArchive]

Jane,

Thank you... got it. I must not have been signing my exe's in the past.
I have just always filled out the "digital signature" section in the
general information. I added the #code-sign application script element
and all is working now. Again, thank you for your help.

David Ault

[NewsArchive]

> I have just always filled out the "digital signature" section in the
> general information. I added the #code-sign application script element
> and all is working now.

David,

Remember to do BOTH.

Where you fill it out on the Code Signing portion of the Visualizer is what
code signs your installer and uninstaller.

Then you use the #code sign directive to sign the executables that you are
distributing.

Both are equally important.

:-)

Charles



--
-------------------------------------------------------------------------------------------------------
Charles Edmonds
www.clarionproseries.com - "Get ProPath, make your Clarion programs ready
for Windows 7 and Vista!"
www.ezchangelog.com - "Free ChangeLog software to manage your projects!"
www.setupcast.com - "A revolutionary new publishing system for software
developers - enhanced for SetupBuilder users!"
www.pagesnip.com - "Print and Save the Web, just the way you want it!"
www.clarionproseries.com - "Serious tools for Clarion Developers"
www.ezround.com - "Round Corner HTML tables with matching Banners, Buttons
and Forms!"
www.lansrad.com - "Intelligent Solutions for Universal Problems"
www.fotokiss.com - "World's Best Auction Photo Editor"
-------------------------------------------------------------------------------------------------------

[NewsArchive]

Is there a "right/wrong" place in the sb script to insert the #code
sign directive?

Thanks.

Brent Engel

[NewsArchive]

> Is there a "right/wrong" place in the sb script to insert the #code
> sign directive?

Brent,

Mostly be sure it is before any of the files are installed (script view).

I put code signing in my scripts right after the

! Create Installation Log

built in comment and line of code that follows it.

Does that help?

Charles


--
-------------------------------------------------------------------------------------------------------
Charles Edmonds
www.clarionproseries.com - "Get ProPath, make your Clarion programs ready
for Windows 7 and Vista!"
www.ezchangelog.com - "Free ChangeLog software to manage your projects!"
www.setupcast.com - "A revolutionary new publishing system for software
developers - enhanced for SetupBuilder users!"
www.pagesnip.com - "Print and Save the Web, just the way you want it!"
www.clarionproseries.com - "Serious tools for Clarion Developers"
www.ezround.com - "Round Corner HTML tables with matching Banners, Buttons
and Forms!"
www.lansrad.com - "Intelligent Solutions for Universal Problems"
www.fotokiss.com - "World's Best Auction Photo Editor"
-------------------------------------------------------------------------------------------------------

[NewsArchive]

Charles,

Thanks, yes that helps, I'm pretty new and the SB stuff if you can't
tell!

-- brent

[NewsArchive]

> Thanks, yes that helps,

Great!

> I'm pretty new and the SB stuff if you can't tell!

LOL - we all are except for Friedrich<g>

:-)

Charles


--
-------------------------------------------------------------------------------------------------------
Charles Edmonds
www.clarionproseries.com - "Get ProPath, make your Clarion programs ready
for Windows 7 and Vista!"
www.ezchangelog.com - "Free ChangeLog software to manage your projects!"
www.setupcast.com - "A revolutionary new publishing system for software
developers - enhanced for SetupBuilder users!"
www.pagesnip.com - "Print and Save the Web, just the way you want it!"
www.clarionproseries.com - "Serious tools for Clarion Developers"
www.ezround.com - "Round Corner HTML tables with matching Banners, Buttons
and Forms!"
www.lansrad.com - "Intelligent Solutions for Universal Problems"
www.fotokiss.com - "World's Best Auction Photo Editor"
-------------------------------------------------------------------------------------------------------

[NewsArchive]

Charles,

> LOL - we all are except for Friedrich<g>

Careful now, don't forget Jane!<g>

--
Lee White

Enroll Today at http://CWaddons.com

Reports....: http://www.cwaddons.com/products/rpm/
Free Review: http://www.clarionmag.com/cmag/v11/v11n06rpm.html
Faxing.....: http://www.cwaddons.com/products/afe/

[NewsArchive]

> Careful now, don't forget Jane!<g>

I know - she gets testy when we do that and she DOES carry a gun<g>

:-)

Charles


--
-------------------------------------------------------------------------------------------------------
Charles Edmonds
www.clarionproseries.com - "Get ProPath, make your Clarion programs ready
for Windows 7 and Vista!"
www.ezchangelog.com - "Free ChangeLog software to manage your projects!"
www.setupcast.com - "A revolutionary new publishing system for software
developers - enhanced for SetupBuilder users!"
www.pagesnip.com - "Print and Save the Web, just the way you want it!"
www.clarionproseries.com - "Serious tools for Clarion Developers"
www.ezround.com - "Round Corner HTML tables with matching Banners, Buttons
and Forms!"
www.lansrad.com - "Intelligent Solutions for Universal Problems"
www.fotokiss.com - "World's Best Auction Photo Editor"
-------------------------------------------------------------------------------------------------------

[NewsArchive]

Yes, Brent, there are guidelines, but I'd disagree with Charles on this.

Although I tend to put the code-signing early in the script in examples I
write, that is NOT necessary.

What you need to remember is that code-signing is a compiler directive.
It happens when your installer is compiled, NOT when it is run on the
end-user's machine.

The important "when" stuff to remember with code-signing is:
1. Insert a manifest first
2. Do Armadillo-type copy protection next
3. Code-sign AFTER those other types of alterations have been done.

To illustrate, the attached zip file contains a hello-world program and a
simple script (and also the compiled installer). You'll need to put the
program in a folder called c:\setup and modify the code-sign directive to
use your credentials to compile the script for yourself.

http://www.lindersoft.com/projects/Brent.zip

But notice that I'm deliberately putting the code-sign compiler directive
AFTER the script item that installs the exe at runtime (pic - just for
purpose of illustration.)

Look at the source exe and you'll see it isn't signed. Look at the
installed exe after you run the installer and you'll see that it is.

Even though the code-sign compiler directive comes after the install script
function, the compiler directive was executed when the installer was
compiled.

Of course... my plane to Tulsa just took a 4-hour diversion to Wichita...
so I may be battier than usual.....

Jane

[NewsArchive]

> Although I tend to put the code-signing early in the script in examples I
> write, that is NOT necessary.
>
> What you need to remember is that code-signing is a compiler directive.
> It happens when your installer is compiled, NOT when it is run on the
> end-user's machine.

<snip>

Your right on that Jane.

However something that Brent does need to keep in mind is that for the most
part things do happen in a linear order in the scripts (even when dealing
with include scripts).

So when I talk to people about where to put things, I usually put them in a
logical sequence so that they don't get confused by jumping all about and
having to remember what happens at compile time vs install time.

So with that in mind, "Code signing" before you "install the files" is
logical (at least to feeble minds like my own)<g>.


> The important "when" stuff to remember with code-signing is:
> 1. Insert a manifest first
> 2. Do Armadillo-type copy protection next
> 3. Code-sign AFTER those other types of alterations have been done.

Absolutely.

Of course the other items were not in question so I'd decided not to hide
the truth among the facts<g>.


> Of course... my plane to Tulsa just took a 4-hour diversion to Wichita...
> so I may be battier than usual.....

Don't tell me they ran out of red wine in a box<g>?

:-)

Charles


--
-------------------------------------------------------------------------------------------------------
Charles Edmonds
www.clarionproseries.com - "Get ProPath, make your Clarion programs ready
for Windows 7 and Vista!"
www.ezchangelog.com - "Free ChangeLog software to manage your projects!"
www.setupcast.com - "A revolutionary new publishing system for software
developers - enhanced for SetupBuilder users!"
www.pagesnip.com - "Print and Save the Web, just the way you want it!"
www.clarionproseries.com - "Serious tools for Clarion Developers"
www.ezround.com - "Round Corner HTML tables with matching Banners, Buttons
and Forms!"
www.lansrad.com - "Intelligent Solutions for Universal Problems"
www.fotokiss.com - "World's Best Auction Photo Editor"
-------------------------------------------------------------------------------------------------------