Comodo

[NewsArchive]

Hi All,

Is it safe to use a browser other than Internet Explorer to order a new
certificate? i.e. Firefox
--
*Regards*,

Lee
www.cya2day.com
CYA - Don't Leave Home Without One
The Hurrier I Go The Behinder I Get

[NewsArchive]

Lee,

> Is it safe to use a browser other than Internet Explorer to order a
> new certificate? i.e. Firefox

Comodo and Microsoft recommend to use Internet Explorer to order an
Authenticode certificate. Other browsers might work, but it's "safer" to
use IE. When something goes wrong then, the first question is "Did you use
Internet Explorer?"

Friedrich

[NewsArchive]

Thank you!

*Regards*,

Lee
www.cya2day.com
CYA - Don't Leave Home Without One
The Hurrier I Go The Behinder I Get

[NewsArchive]

Friedrich,

what is the recommended Operating System for purchasing a certificate?

I recall that XP was the one that worked to get a "Vista-Cert", but not Vista /
Win 7 itself.

Should we keep an instance of XP alive in a VM or are others now working too?

thx,
Wolfgang

[NewsArchive]

Wolfgang,

> what is the recommended Operating System for purchasing a
> certificate?
>
> I recall that XP was the one that worked to get a "Vista-Cert",
> but not Vista / Win 7 itself.
>
> Should we keep an instance of XP alive in a VM or are others
> now working too?

If you need the certificate in form of .spc/.pvk then you can NOT use a
modern UAC-aware operating system. Vista+ does not support the "In the
file" option which is required to receive the certificate as .spc/.pvk.

http://www.lindersoft.com/CodeSign.pdf

http://www.lindersoft.com/forums/showthread.php?t=36060

Of course, you can use any UAC-aware operating system to request a
code-signing certificate, but you have to "export" it from the Internet
Explorer certificate store to a .pfx file. You can then use this .pfx in
SetupBuilder (Microsoft SignTool.exe tool) or convert it to .spc/.pvk.

Friedrich

[NewsArchive]

This is why I made an XP VM. I rarely fire it up.

--

Russ Eggen
RADFusion International, LLC

[NewsArchive]

I also used this approach last week to renew my certificate,
WIN XP in VM Ware virtual machine and IE8.

Timo Lahtinen

[NewsArchive]

>
> This is why I made an XP VM. I rarely fire it up.
>

I have to "renew" in September. To be on the safe side, I'll do it from my
good old XP VM.

Friedrich

[NewsArchive]

Friedrich,

> I have to "renew" in September. To be on the safe side, I'll do it from my
> good old XP VM.

They DO come in handy, don't they?!<g>

--
Lee White

RPM Report Viewer.: http://www.cwaddons.com/products/rpm/
RPM Review........: http://www.clarionmag.com/cmag/v11/v11n06rpm.html
Report Faxing.....: http://www.cwaddons.com/products/afe/
---Enroll Today---: http://CWaddons.com

Enhanced Reporting: http://CreativeReporting.com

Product Release & Update Notices
http://twitter.com/DeveloperPLUS

Windows 8 brings us "The Oval, Bumper Car, Roller Coaster of Wait!"

[NewsArchive]

One bad side is that Microsoft will cease support/updates next year
for XP.

Jeff Slarve
www.jssoftware.com
www.twitter.com/jslarve
I'll search help files & Google for you.

[NewsArchive]

> One bad side is that Microsoft will cease support/updates next year
> for XP.

A day that cant come soon enough, IMO:)
--

Mark Riffey
http://www.rescuemarketing.com
Now featured on the Visa Business Network
If Guy Kawasaki, the staff of the Wall Street Journal,
Fast Company, US Bank, Marketing Profs & Business Week read it,
maybe you should too.

[NewsArchive]

Maybe this will help in the mean time?<g>

http://picklebums.com/2011/03/08/ten-things-for-kids-to-do-while-waiting/

Jeff Slarve
www.jssoftware.com
www.twitter.com/jslarve
I'll search help files & Google for you.

[NewsArchive]

Jeff,

> One bad side is that Microsoft will cease support/updates next year
> for XP.

Makes no difference to me. Hell, I live on the edge and my XP-Pro VM
no longer even gets UPDATES!<g> I don't even have a browser handy in
the XP VM's - no need.

And, since I'll probably be doing native IDE C6.3 work for the near
future (and possibly longer<g>) I'll hang onto XP come hell or.....

--
Lee White

RPM Report Viewer.: http://www.cwaddons.com/products/rpm/
RPM Review........: http://www.clarionmag.com/cmag/v11/v11n06rpm.html
Report Faxing.....: http://www.cwaddons.com/products/afe/
---Enroll Today---: http://CWaddons.com

Enhanced Reporting: http://CreativeReporting.com

Product Release & Update Notices
http://twitter.com/DeveloperPLUS

Windows 8 brings us "The Oval, Bumper Car, Roller Coaster of Wait!"

[NewsArchive]

That is what I did, got the 3 year certificate. Went smoother than the
first time. Had my cert in 24 hours.

--

Russ Eggen
RADFusion International, LLC

[NewsArchive]

Sleep is for wimps!

XP IS FOR WIMPS !@!!!!

My last certificate (June of 2011) was done with 64-bit Vista and IE.

Installed the certificate into IE (instead of saving as a file).

Then exported from IE to pfx.

Pics.

jf

[NewsArchive]

I've just ordered mine (using IE10 on Win7). I clicked the $200
option in the Lindersoft site, which took me to the Comodo page.

After fiddling a bit, I realized the best way was to login using my
earlier Comodo username/password (on the top right), before telling it
to order my certificate. It forced me to enter a new password (the
old one had expired).

Then I had to go back to Lindersoft to get to the order page again,
but Comodo remembered I was logged on now.

I proceeded to order the certificate (using the same email address as
two years ago) and I've received the email confirming the order.

Now I am waiting for their response. Perhaps I'll get it in 24 hours
like Russ did, but I've got 2 weeks before my old certificate expires.

Mike Hanson
www.boxsoft.net

[NewsArchive]

But beware, this way, 14 days earlier with every 3 year order, you'll have 2
full time certificates for cca 78 years from now <g>
The only problem is, can we really have 2 certs at a same time? <g>
Darko

[NewsArchive]

I'll account for that as insurance costs. <g>

Mike Hanson
www.boxsoft.net

[NewsArchive]

> Maybe this will help in the mean time

HEHEH
--

Mark Riffey
http://www.rescuemarketing.com
Now featured on the Visa Business Network
If Guy Kawasaki, the staff of the Wall Street Journal,
Fast Company, US Bank, Marketing Profs & Business Week read it,
maybe you should too.

[NewsArchive]

Hi Friedrich,

Considering you have used a UAC-Aware OS and have exported the
certificate to a PFX file, how do you go about converting it to the
normal .spc/pvk files?

Thanks.

*Regards*,

Lee
www.cya2day.com
CYA - Don't Leave Home Without One
The Hurrier I Go The Behinder I Get

[NewsArchive]

Lee,

> Considering you have used a UAC-Aware OS and have exported
> the certificate to a PFX file, how do you go about converting
> it to the normal .spc/pvk files?

Here is a "How to convert PFX/P12 file to SPC/PVK format"

http://www.lindersoft.com/forums/showthread.php?p=57933&highlight=spc#post57933

But if you already have a .pfx, I would suggest to switch to SignTool.exe.
The SetupBuilder compiler can handle both .pfx and .spc/.pvk.

Friedrich

[NewsArchive]

>But if you already have a .pfx, I would suggest to switch to SignTool.exe.
>The SetupBuilder compiler can handle both .pfx and .spc/.pvk.

Works really well. BTW, I also have a batch file called SignIt.bat,
for when I need to sign something manually:

"C:\Program Files\Microsoft SDKs\Windows\v6.1\Bin\signtool.exe" sign
/f P:\Comodo\Your.p12 /p YourPassword /t
http://timestamp.comodoca.com/authenticode /d "Program Description"
/du www.yoursite.com /v %1

Then I can just do this: C:\Comodo\SignIt MyProg.exe

Mike Hanson
www.boxsoft.net

[NewsArchive]

Friedrich,

Thanks.

*Regards*,

Lee
www.cya2day.com
CYA - Don't Leave Home Without One
The Hurrier I Go The Behinder I Get

[NewsArchive]

Hi All,

FWIW - It took me 9 days to receive my certificate from Comodo because
of a simple, frustrating oversight.

If your company happens to be a corporation Comodo goes directly to Dun
& Bradstreet for information confirmation. If your information there
matches your application I'm assuming you will receive your certificate
almost instantly.

It seems that D&B had all my company information correct except the
phone number. The number listed was a 6 year old number that belonged to
my previous corporation. The number they had listed *never* was a valid
number for the current company.

However, the incorrect phone number is the one Comodo insisted on using
for the callback.

I then spent 2 days with D&B attempting to get the number corrected.
Another 3 days went by waiting for D&B to call back. ( They conducted a
complete interview gathering all the information related to the company
) Then another 4 days waiting for the information to get published on
their site.

As soon as the information was published correctly on the D&B site I
notified Comodo. They did the callback the next morning and 1 hour later
I had the Email with the certificate collection link from Comodo. I was
not required to submit any documentation such as bank statements,
utility bills or anything of the sort.

Moral of the story - It might pay to check your Dun & Bradstreet
information a couple of weeks prior to ordering your Comodo certificate
just in case. I don't mind telling you, although it wasn't terribly
difficult to accomplish, the whole ordeal was mind numbing and a REAL PITA.

FWIW.....<g>

*Regards*,

Lee
www.cya2day.com
CYA - Don't Leave Home Without One
The Hurrier I Go The Behinder I Get

[NewsArchive]

I don't think I'm listed on D&B. In my case (yesterday and three
years ago), they want to get conformation from my domain registrar.
Since mine is private, I had to request a domain authorization letter
from Domains By Proxy, which was delivered earlier today. Three years
ago there were a bunch of other things that they had to check, but
this time only the domain thing was mentioned, so I'm hoping to be
through the gates in the next day or two.

Mike Hanson
www.boxsoft.net

[NewsArchive]

Hi Mike,

It seems they may continually change the rules so it makes it somewhat
difficult to completely prepare for what Comodo is going to ask from you.

Oh well - I have it now.


*Regards*,

Lee
www.cya2day.com
CYA - Don't Leave Home Without One
The Hurrier I Go The Behinder I Get

[NewsArchive]

Yup. That's why I started 2 weeks ahead of the old one expiring.

Mike Hanson
www.boxsoft.net

[NewsArchive]

Same here.

My existing one expires in two days.

*Regards*,

Lee
www.cya2day.com
CYA - Don't Leave Home Without One
The Hurrier I Go The Behinder I Get

[NewsArchive]

Hi Mike

>I don't think I'm listed on D&B.

I didn't think my company was listed at D&B until Comodo told me. And the info D&B had
was all wrong :-(

Took over a week to get it all sorted.

johnG

[NewsArchive]

Hi Lee

>It seems that D&B had all my company information correct except the
>phone number.

Very frustrating. Exactly the same problem I had about 2 months ago. Finally got it
sorted out.

johnG

[NewsArchive]

It was very frustrating. It literally sucks when you are delayed by
something/events you have no control over.

I was all prepared for what I *thought* they were going to ask for. e.g.
Utility bill and Bank statement in the company name. I had everything
ready to fax but unfortunately I was never asked... Boo-Hoo

*Regards*,

Lee
www.cya2day.com
CYA - Don't Leave Home Without One
The Hurrier I Go The Behinder I Get

[NewsArchive]

I've had D&B offer to list me a few times, but I've always declined.

Mike Hanson
www.boxsoft.net

[NewsArchive]

Mike,

> I've had D&B offer to list me a few times, but I've always declined.

Makes no difference, you're still listed as is my dissolved corp!<g>

Lee White

[NewsArchive]

Interesting. I'll have to look at that.

Mike Hanson
www.boxsoft.net

[NewsArchive]

Well it seems they know about that one somehow, but not my other two
current corporations, and neither of my four inactive/prior. <g>

Mike Hanson
www.boxsoft.net

[NewsArchive]

It's a good thing you chose *NOT* to use any of the others when
purchasing your Comodo certificate......<g>

*Regards*,

Lee
www.cya2day.com
CYA - Don't Leave Home Without One
The Hurrier I Go The Behinder I Get

[NewsArchive]

There is that chance. I've actually been using my "BoxSoft
Corporation" certificate to sign software for "BoxSoft Casino Tools
Inc" corporation. That's probably a no-no, but considering both
corporations are owned by the same holding company, and have similar
names, I can probably get away with it for now. I'll eventually get
that additional certificate, though.

Mike Hanson
www.boxsoft.net

[NewsArchive]

Ok, so my certificate authorization is complete, and I've retrieved
and exported the certificate from IE. My former cert (from three
years ago) was a p12 file, but this one has a pfx extension. Do I
need to convert (or rename) this, or can I use it as is? (If I use it
as is, then I'll need to change all of my scripts and batch files to
use the new extension.)

Mike Hanson
www.boxsoft.net

[NewsArchive]

BTW, I did test pfx in place of the p12 using the signtool, and it
seems to work. I would just like to avoid editing all my scripts, if
it's unnecessary.

Mike Hanson
www.boxsoft.net

[NewsArchive]

Hi Mike,

> BTW, I did test pfx in place of the p12 using the signtool, and it
> seems to work. I would just like to avoid editing all my scripts, if
> it's unnecessary.

From the technical point-of-view, there is no difference between a .PFX and
..P12.

http://www.lindersoft.com/forums/showthread.php?p=57823#post57823

Friedrich

[NewsArchive]

I followed Jane's original instructions on creating it, I've never seen
a p12 extension before.

--

Russ Eggen
RADFusion International, LLC

[NewsArchive]

For whatever reason, I've been using a P12 file for the past three
years. Googling that and pfx seems to indicate that they're basically
interchangeable

I just wish I could determine whether I need to change all of my
scripts, or whether there's an easier way.

Mike Hanson
www.boxsoft.net

[NewsArchive]

What happens if you rename the file to the p12 extension?

--

Russ Eggen
RADFusion International, LLC

[NewsArchive]

I considered that, but haven't tried it yet...

Well what do you know. It seems to work just fine. <g> Thanks for
the kick in the pants.

Mike Hanson
www.boxsoft.net

[NewsArchive]

Thanks, Friedrich. I eventually confirmed that I can just rename the
file.

Mike Hanson
www.boxsoft.net

[NewsArchive]

<vbg>

--

Russ Eggen
RADFusion International, LLC