PDA

View Full Version : Code Signing Renewal - VISTA and Firefox



NewsArchive
09-15-2007, 02:45 AM
Hi,

Using SB 6.51953

I renewed my code signing certificate with COMODO. Unfortunately, I am
now using Vista but ordered the replacement certificate using Firefox.
Apparently VISTA will not allow separate certificate and private key
files, just an export to a pfx file. Firefox will, however, will only
export ('backup') the certificate and key as a PKCS12 file.

My setupbuilder compiles now fail at the code signing stage. My
questions are:

Is having a pfx file entered in code signing section a substitute for
the individual certificate and key files?

If so, how can I converted the PKCS12 file to a pfx file? Renaming
didn't seem to work with SB.

If not, how do I locate the individual certificate and private key files?

Many thanks.

Casey Rippon

NewsArchive
09-15-2007, 02:47 AM
> Using SB 6.51953

Casey,

Do you have access to a computer with XP and Internet Explorer 6 or W2K PRO
and Internet Explorer 6?

Comodo support is great about working with you when you don't get your key
saved properly the first time around, and will give you instructions on how
to go back through the process.

I went though a similar thing myself - I started the order process in Vista
thinking the Comodo order form handled Vista correctly, but as you found
it, it doesn't.

IMHO, it would be better to access a computer with XP and Internet Explorer
6 or W2K PRO and Internet Explorer 6 and follow instructions from Comodo
Support to save your separate certificate and private key files - then you
can use a Microsoft util program to create a pfx.

Here are some helpful instructions from the Association of Shareware
Professionals on code signing PAD files AND converting keys and
certificates to PFX format.

http://www.asp-shareware.org/pad/spec/padsign.php

http://www.asp-shareware.org/pad/spec/howto_padsign_padgen.php

David


--
From David Troxell - Product Scope 7 - Encourager Software
Clarion Third Party Profile Exchange Online
http://encouragersoftware.com/profile/clarlinks.html
http://www.encouragersoftware.com/
http://www.profileexchanges.com/blog/

NewsArchive
09-16-2007, 03:59 AM
Casey,

PKCS 12 and PFX are the same format.

To use PFX files, you have to get your hands on Signtool.exe. Please check
the following link:

http://www.lindersoft.com/forums/showthread.php?t=2202

And this one (see "Obtaining the Microsoft Code Signing Files")

http://www.wiscocomputing.com/articles/code-signing.htm

Does this help?

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder 6.5
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

NewsArchive
09-17-2007, 01:30 AM
Thank you very much, David. If I can't get Friedrich's solution to work
I will try to track down a machine with IE6.

Casey Rippon

NewsArchive
09-17-2007, 01:31 AM
Thank you, Friedrich


That resolved the problem.


Casey Rippon

NewsArchive
09-17-2007, 01:32 AM
Perfect :) You are welcome.

Friedrich