PDA

View Full Version : code signing not quite


NewsArchive
03-15-2016, 02:35 AM
First I downloaded the microsoft sdk, which gave me signtool. However
the download was for windows 7. I am using windows 10. So is this
okay.

I have received my code signing certificate.

I exported the pfx file from internet explorer. I tried to follow the
directions. The pfx file has been exported. However I did not get a
prompt to enter the password for the cryptoapi private code. I think
this is the password I entered when ordering the certificate.

So when I download the exe it states unknown publisher. So something is
wrong. No error messages on the compile. For my last certificate I had
a spc file and a pvk file. I dont' seem to have those now.


Any ideas Gary
NewsArchive
03-15-2016, 02:36 AM
Hi Gary,

> First I downloaded the microsoft sdk, which gave me signtool. However
> the download was for windows 7. I am using windows 10. So is this
> okay.

For SHA2 or dual code signing you need the SDK for Windows 10 or at
least 8.1 to get SHA1/dual capable Signtool.exe.

Best regards,

--
Arnor Baldvinsson
Icetips Alta LLC
NewsArchive
03-15-2016, 02:36 AM
> For my last certificate I had
>a spc file and a pvk file. I dont' seem to have those now.

When using your .PFX file you no longer use the .spc and .pvk files.

John Griffiths
NewsArchive
03-15-2016, 03:55 AM
Gary,

> First I downloaded the microsoft sdk, which gave me signtool. However
> the download was for windows 7. I am using windows 10. So is this
> okay.

You can download SignTool V10 from within the IDE:

'Help' | 'Get Microsoft SignTool'

Friedrich
NewsArchive
03-15-2016, 03:59 AM
Gary,

> I exported the pfx file from internet explorer. I tried to follow the
> directions. The pfx file has been exported. However I did not get a
> prompt to enter the password for the cryptoapi private code. I think
> this is the password I entered when ordering the certificate.

When using a .PFX there is no prompt for a password protected certificate.

> So when I download the exe it states unknown publisher. So something is
> wrong. No error messages on the compile. For my last certificate I had
> a spc file and a pvk file. I dont' seem to have those now.

Make sure you have enabled code-signing for your setup.exe. See attached
screenshots.

1. You can configure your code-signing certificate in 'Tools' | 'Options' ->
Code-Signing tab

2. In your .sbp project, enable General Information -> Digital Signature

The compiler window will report the code-signing status.

Friedrich