What To Code Sign?

[NewsArchive]

Hi All

Just successfully code signed two exes. Each of these call many dlls.
Do the also have to be code signed?

Cheers
Andre

[NewsArchive]

Andre,

> Just successfully code signed two exes. Each of these call many dlls.
> Do the also have to be code signed?

All EXE's and DLL's should be signed... assuming they are YOUR
compiles. If they belong to someone else then they should already be
signed.

--
Lee White

RPM Report Viewer.: http://www.cwaddons.com/products/rpm/
RPM Review........: http://archive.clarionmag.com/cmag/v11/v11n06rpm.html
Report Faxing.....: http://www.cwaddons.com/products/afe/
---Enroll Today---: http://CWaddons.com

Creative Reporting: http://www.CreativeReporting.com

Product Release & Update Notices
http://twitter.com/DeveloperPLUS

Windows 8 brings us "The Oval, Bumper Car, Roller Coaster of Wait!"
And, now, Windows 10 brings us "The Inch Worm, Bumper Car of Wait!"

[NewsArchive]

Hi Lee

So I have to sign around 800 dlls? Crazy stuff.

What about a manifest? Does each dll have to have a manifest? And what
if some of the dlls we use are NOT code signed? What happens when the
app is launched? Does windows squeak?

Cheers
Andre

[NewsArchive]

Andre,

> So I have to sign around 800 dlls? Crazy stuff.

Get started!<g>

> What about a manifest? Does each dll have to have a manifest? And what
> if some of the dlls we use are NOT code signed? What happens when the
> app is launched? Does windows squeak?

Only the EXE can use or needs a manifest.

Windows will only yell at you about the EXE it's just good practice to
code sign all executables which includes EXE's and DLL's. If you check
the RTL's from SV you'll see that they are all signed... well, the
current versions are.

You can use wildcards in the #code-sign directive in SB. That makes it
a lot easier than doing each one at a time.

--
Lee White

RPM Report Viewer.: http://www.cwaddons.com/products/rpm/
RPM Review........: http://archive.clarionmag.com/cmag/v11/v11n06rpm.html
Report Faxing.....: http://www.cwaddons.com/products/afe/
---Enroll Today---: http://CWaddons.com

Creative Reporting: http://www.CreativeReporting.com

Product Release & Update Notices
http://twitter.com/DeveloperPLUS

Windows 8 brings us "The Oval, Bumper Car, Roller Coaster of Wait!"
And, now, Windows 10 brings us "The Inch Worm, Bumper Car of Wait!"

[NewsArchive]

Hi Lee

Thanks for that. I see that it is not mandatory to code sign the dlls
unless someone else is also going to use them. But I can see that it is
best practice to do so anyway.

What if you are using a third party dll that is code signed. I assume
that will not be an issue. Correct?

Cheers
Andre

[NewsArchive]

Andre,

> What if you are using a third party dll that is code signed. I assume
> that will not be an issue. Correct?

Not an issue. Since it's already signed the author has assumed
responsibility for the code. That's really what code signing is about
as well as making it evident if the file has been altered since it was
signed.

--
Lee White

RPM Report Viewer.: http://www.cwaddons.com/products/rpm/
RPM Review........: http://archive.clarionmag.com/cmag/v11/v11n06rpm.html
Report Faxing.....: http://www.cwaddons.com/products/afe/
---Enroll Today---: http://CWaddons.com

Creative Reporting: http://www.CreativeReporting.com

Product Release & Update Notices
http://twitter.com/DeveloperPLUS

Windows 8 brings us "The Oval, Bumper Car, Roller Coaster of Wait!"
And, now, Windows 10 brings us "The Inch Worm, Bumper Car of Wait!"

[NewsArchive]

Hi Lee

And if you have dlls that are from a third party not code signed mixed
in yours that are code signed also not a problem I assume?

Cheers
Andre

[NewsArchive]

Andre,

> And if you have dlls that are from a third party not code signed mixed
> in yours that are code signed also not a problem I assume?

Correct, not a problem but you should YELL REALLY LOAD at any 3rd
party that doesn't code sign these days!

Recent installs of RPM/AFE/CRT include signed and unsigned DLL's so
the developer can rebase the unsigned DLL's if wanted.

--
Lee White

RPM Report Viewer.: http://www.cwaddons.com/products/rpm/
RPM Review........: http://archive.clarionmag.com/cmag/v11/v11n06rpm.html
Report Faxing.....: http://www.cwaddons.com/products/afe/
---Enroll Today---: http://CWaddons.com

Creative Reporting: http://www.CreativeReporting.com

Product Release & Update Notices
http://twitter.com/DeveloperPLUS

Windows 8 brings us "The Oval, Bumper Car, Roller Coaster of Wait!"
And, now, Windows 10 brings us "The Inch Worm, Bumper Car of Wait!"

[NewsArchive]

been watching Beavis again?

>YELL REALLY LOAD

Jeff Slarve
www.jssoftware.com
Twitter free since Jan 11, 2016
I'll search help files & Google for you.

Grammar troll's, are the worse.

[NewsArchive]

Jeff,

> been watching Beavis again?

Nope, just butthead!

Lee White

[NewsArchive]

>> And if you have dlls that are from a third party not code signed
>> mixed in yours that are code signed also not a problem I assume?
>
> Correct, not a problem but you should YELL REALLY LOAD at any 3rd
> party that doesn't code sign these days!
>
> Recent installs of RPM/AFE/CRT include signed and unsigned DLL's so
> the developer can rebase the unsigned DLL's if wanted.

Agree 100%. YELL REALLY LOAD!

Unsigned third-party EXE and DLL files can create a potential support
nightmare. If the "protection system" decides to block or delete
non-code-signed DLLs -- then the "hell breaks loose" <g>

Friedrich

[NewsArchive]

> Recent installs of RPM/AFE/CRT include signed and unsigned DLL's so
> the developer can rebase the unsigned DLL's if wanted.

Only a few of our templates use DLL's, but those that do are shipped the
same way.


:-)

Charles


--
-------------------------------------------------------------------------------------------------------
Charles Edmonds

cjeByteMeSpammers@lansrad.com (remove the "ByteMeSpammers" to email me)
www.clarionproseries.com - ImageEx, ProScan, ProImage, ProPath and other
Clarion developer tools!
www.seal-soft.com - The xProduct Clarion templates - xWordCOM, xToolTip,
xDataBackup Manager and more!
www.ezchangelog.com - "Free ChangeLog software to manage your projects!"
www.setupcast.com - "A revolutionary new publishing system for software
developers - enhanced for SetupBuilder users!"
www.ezround.com - "Round Corner HTML tables with matching Banners, Buttons
and Forms - Now with PNG support!
www.lansrad.com - "Intelligent Solutions for Universal Problems"
www.fotokiss.com - "World's Best Auction Photo Editor"
-------------------------------------------------------------------------------------------------------

[NewsArchive]

:-(

I guess I will have to wait and see then.

Andre Labuschagne

[NewsArchive]

Hi Andre,

> So I have to sign around 800 dlls? Crazy stuff.

While the DLLs should be code signed, I have never seen any response
from Windows if they are or are not. I have a client project that has
couple of DLLs that aren't code signed and they have never had issues
with them. That said, they SHOULD be code signed to be all proper, but
you MAY be able to get away with not doing it.

For a big bunch like that, I'd be tempted to do it with a .bat file to
start with. With a good editor it's easier to deal with that than add
them all into SB in one go. If the DLL are all in a single folder or
close by, you could use tools like Total Commander to find them all.
Copy the list into an editor, remove any that should not be included and
then construct a batch from that.

Best regards,


--
Arnor Baldvinsson
Icetips Alta LLC

[NewsArchive]

Arnor,

> For a big bunch like that, I'd be tempted to do it with a .bat file to
> start with. With a good editor it's easier to deal with that than add
> them all into SB in one go. If the DLL are all in a single folder or
> close by, you could use tools like Total Commander to find them all.
> Copy the list into an editor, remove any that should not be included and
> then construct a batch from that.

Not needed. You can use wildcards in the #code-sign directive in SB.

Just copy the ones that need to be signed into a folder by themselves
and run a simple wildcard SB script - done!<g>

--
Lee White

RPM Report Viewer.: http://www.cwaddons.com/products/rpm/
RPM Review........: http://archive.clarionmag.com/cmag/v11/v11n06rpm.html
Report Faxing.....: http://www.cwaddons.com/products/afe/
---Enroll Today---: http://CWaddons.com

Creative Reporting: http://www.CreativeReporting.com

Product Release & Update Notices
http://twitter.com/DeveloperPLUS

Windows 8 brings us "The Oval, Bumper Car, Roller Coaster of Wait!"
And, now, Windows 10 brings us "The Inch Worm, Bumper Car of Wait!"

[NewsArchive]

> Not needed. You can use wildcards in the #code-sign directive in SB.
>
> Just copy the ones that need to be signed into a folder by themselves
> and run a simple wildcard SB script - done!<g>

YES, EXACTLY :-)

Friedrich

[NewsArchive]

Hi Arnor

I believe we can use a wild card with SB. Have not checked it out yet
but that is what others are saying.

Cheers
Andre

[NewsArchive]

Hi Lee,

> Not needed. You can use wildcards in the #code-sign directive in SB.

Cool! Didn't know that!

Best regards,

--
Arnor Baldvinsson
Icetips Alta LLC

[NewsArchive]

Arnor,

> > Not needed. You can use wildcards in the #code-sign directive in SB.
> Cool! Didn't know that!

I use variables and wildcards wherever possible. When I gen a new
build I simply change about 5 variables and go!<g>

Lee White

[NewsArchive]

There you go - Lee confirms.

Andre Labuschagne

[NewsArchive]

Hi Lee,

> I use variables and wildcards wherever possible. When I gen a new
> build I simply change about 5 variables and go!<g>

I press a button and go get some coffee;)

Best regards,


--
Arnor Baldvinsson
Icetips Alta LLC

[NewsArchive]

And then you curse and press it again later<g>

Jeff Slarve
www.jssoftware.com
Twitter free since Jan 11, 2016
I'll search help files & Google for you.

Grammar troll's, are the worse.

[NewsArchive]

Lee,

>Recent installs of RPM/AFE/CRT include signed and unsigned DLL's so
>the developer can rebase the unsigned DLL's if wanted.

thats cool.

I do not use RPM/AFE/CRT, but I really appreciate that!

Thanks for your efforts,
Wolfgang