PDA

View Full Version : Code signing does not seem to be working in all cases.



NewsArchive
05-02-2019, 08:23 AM
I recently re did code signing for my program. Everything works fine when
I test on my machine. Compile and run.
However when I load to the website I get a message:

Windows protected your PC
Windows Defender SmartScreen prevented an unrecognized app from starting.
Running this app might put your PC at risk.
More info

I do not get this message when I compile through sb and then run. Only
when I download and run from the web.

I do remember when purchasing the renewal I was given the choice of sh1
sh2 or something else. I choose sh2. I don't know if this
could be causing the problem.

Thanks

Gary

NewsArchive
05-02-2019, 08:24 AM
Gary,

> I do not get this message when I compile through sb and then run. Only
> when I download and run from the web.

well, this is the expected behavior in the modern code-signing world <g>
Your standard code-signing certificate has not built enough reputation yet.

http://www.lindersoft.com/forums/showthread.php?47837

Hope this helps!

Friedrich

NewsArchive
05-02-2019, 08:24 AM
And two more interesting links:

http://www.lindersoft.com/forums/showthread.php?47948
http://www.lindersoft.com/forums/showthread.php?47778

Friedrich

NewsArchive
05-02-2019, 01:27 PM
How long does it take to build a reputattion. I have 3 machines will that
be enough. Or does running your program or downloading many times help.

Gary

NewsArchive
05-02-2019, 01:28 PM
Gary,

> How long does it take to build a reputattion. I have 3 machines will that
> be enough. Or does running your program or downloading many times help.

only Microsoft and Google knows. You have to do reputation building for
Chrome and IE/Edge. IMO, 75-250 downloads from different IP addresses.

Friedrich

NewsArchive
05-04-2019, 08:10 AM
Just to clarify does the program just need to be downloaded. Or
downloaded and run.
You didn't mention firefox. I assume the rules apply to this also.

Gary

NewsArchive
05-04-2019, 08:10 AM
Hi Gary,

> Just to clarify does the program just need to be downloaded. Or
> downloaded and run.
> You didn't mention firefox. I assume the rules apply to this also.

Download and run. Firefox does not have it's own "SmartScreen" feature.
Only Microsoft and Google have.

Friedrich

NewsArchive
05-04-2019, 08:10 AM
Sorry for all the messages Friedrich.

I use firefox as my browser. From your message firefox does not have
smartscreen. I still get the message with firefox.

Just to be sure I have explained this. I can download the program with
any browser no problem. The problem occurs when I locate
the file on the hard drive and run it. This is when I get the message.

Thanks

Gary

NewsArchive
05-04-2019, 08:11 AM
In your original message you said:

> However when I load to the website I get a message:
>
> Windows protected your PC
> Windows Defender SmartScreen prevented an unrecognized app from starting.
> Running this app might put your PC at risk.
> More info

This happens when your certificate has not enough reputation. You have to
use a Microsoft browser to build reputation for SmartScreen and a Google
browser to build reputation for Chrome systems. Firefox itself does not
have such a reputation based system. In your case, Defender SmartScreen
kicks in because reputation level is not high enough.

Once you have built a reputation for your certificate, the message will go
away.

BTW, this is not a new phenomenon. See this thread dated May 2013 (six
years ago):
http://www.lindersoft.com/forums/showthread.php?39019-SmartScreen-and-Windows-8&highlight=reputation

Friedrich

NewsArchive
05-04-2019, 08:11 AM
See what Wolfgang did to fix it:
http://www.lindersoft.com/forums/showthread.php?47928-Reputation-building-may-I-ask-you-for-a-favor

Friedrich