EVCS and certificate token

[NewsArchive]

Hi,

Running SB 10.0.5074 Developer and my new certificate had to be downloaded
to a USB token device and the private key is not exportable so I can't
create a pfx file.

Found the nifty EVCS macro option in the docs and it worked like a charm
for code signing the installer and uninstaller but fails on the script line

#code-sign application "C:\myproj\thisproj\my.exe ["EVCS://text of Issued
To"]

The compiler error is GEN1061 File not found: EVCS://text of Issued To

Any idea of where I've gone wrong here?

TIA

Parker

[NewsArchive]

Parker,

> Running SB 10.0.5074 Developer and my new certificate had to be downloaded
> to a USB token device and the private key is not exportable so I can't
> create a pfx file.
>
> Found the nifty EVCS macro option in the docs and it worked like a charm
> for code signing the installer and uninstaller but fails on the script
> line
>
> #code-sign application "C:\myproj\thisproj\my.exe ["EVCS://text of Issued
> To"]
>
> The compiler error is GEN1061 File not found: EVCS://text of Issued To
>
> Any idea of where I've gone wrong here?

I'll check the SB compiler source codes and get back to you on this...

Friedrich

[NewsArchive]

Parker,

You are on an old #5074 build - the latest one is #5452. Could you please
update to the latest build? I can then send you a new small SB10.EXE to
test a potential EVCS fix. This file does not work with older SB
installations.

Friedrich

[NewsArchive]

Hi Friedrich,

Thank you for looking at this.

I'm now on 5452.

Regards

Parker

[NewsArchive]

Hi Parker,

> Thank you for looking at this.
>
> I'm now on 5452.

We have to run some more tests. I'll send the test SB10.EXE to you
tomorrow.

Friedrich

[NewsArchive]

Hi Friedrich,

No worries, whenever your satisfied with the patch I'm sure I'll be😀

Regards

Parker

[NewsArchive]

Hi Friedrich,

As a temp work around I've created a batch file that code signs my DLLs and
exe and I replaced the code signing script lines with the following to call
the batch file

#run ("sign.bat", "", "") [Wait]

Do you see any issues with this approach?

Regards

Parker

[NewsArchive]

Hi Parker,

Sorry for the delay. It was school holiday season here and I took a few
days off from work. This slowed things down :-(

No issue with this approach. The complex part is the EVCS code-signing for
the setup.exe and uninstall.exe (which works fine). So you can use this
batch file method without any problem.

Sorry again for the delay. I'll send you the test SB10.exe tomorrow.

Friedrich

[NewsArchive]

Hi Friedrich,

No worries, holidays and family time are good for the soul!
Thanks for the confirmation on the batch file approach.

Regards

Parker

[NewsArchive]

Hi Parker,

could you please check your e-mail? Does EVCS work as expected now?

Thank you for your help!

Friedrich

[NewsArchive]

Hi Friedrich,

Could I trouble you to send this again?

Something very odd happened, I opened the email saw the attached zip file
and downloaded it.
When it finished, almost instantly, the email disappeared and the
SB10_5453.zip file on my hard drive is empty.

Sorry to be such a pain.

Regards

Parker

[NewsArchive]

Hi Parker,

I have renamed the extension from .ZIP to .ZI_ and re-sent it one minute
ago.

Did you receive it?

Thank you!

Friedrich

[NewsArchive]

Hi Friedrich,

Yes I have it, tried it without success.
Emailed you with copies of the compiler output and my project settings.
Perhaps there are time server issues in play now as well?

Regards

Parker

[NewsArchive]

Hi Parker,

> Yes I have it, tried it without success.
> Emailed you with copies of the compiler output and my project settings.
> Perhaps there are time server issues in play now as well?

Does your "batch" code-signing still work okay?

Friedrich

[NewsArchive]

Hi Parker,

>> Yes I have it, tried it without success.
>> Emailed you with copies of the compiler output and my project settings.
>> Perhaps there are time server issues in play now as well?
>
> Does your "batch" code-signing still work okay?

I'll send a new test SB10.EXE with more debug code for EVCS...

Friedrich

[NewsArchive]

Hi Friedrich,

Yes, the batch file still signs the dll files successfully.
An interesting twist, I changed my time server and now the script runs to
completion, seems to indicate it signed the dll files, but they are not
signed at the end of the process. I do however get a installer exe created.

Adding Digital Certificate II (Preprocessor)...
SIGNTOOL: C:\CWProjects\RADAR10_1\EKG.dll
SVER: 10.0.10240.16384
Compiler warning GEN1061: File not found:
SHA2: 0
Code signed successfully: C:\CWProjects\RADAR10_1\EKG.dll

Regards

Parker

[NewsArchive]

Hi Parker,

very sorry for the delay. It's a *very* complicated issue. But I think
that I have a fix now.

Friedrich

[NewsArchive]

Hi Friedrich,

Thanks for the update.
My batch file technique has been getting me by so whenever you are ready
for me to test just let me know.

Regards

Parker