Reply to Thread

Post a reply to the thread: Cannot use codesigning with in cloud certificate

Your Message

Click here to log in

What's the name of our main installation product (in uppercase letters), directly followed by the current year?

 

You may choose an icon for your message from this list

Additional Options

  • Will turn www.example.com into [URL]http://www.example.com[/URL].

Topic Review (Newest First)

  • 08-28-2024, 11:18 AM
    linder

    Re: Cannot use codesigning with in cloud certificate

    I think a standard (cloud) certificate should work fine, too. Just the identity background check for EV is different.

    I'll come back to you when I am ready with the new code-signing module.

    Thank you for your help!

    Friedrich
  • 08-28-2024, 09:59 AM
    ccordes

    Re: Cannot use codesigning with in cloud certificate

    That's sounds great!
    I don't have an EV certificate, it's a standard one, but it still has the keys in the cloud.

    Let me know whenever you're ready.
  • 08-28-2024, 09:38 AM
    linder

    Re: Cannot use codesigning with in cloud certificate

    Hello,

    yes, we have completely rewritten the code-signing stuff in the new version. We are using the thumbprint now. BTW, we are waiting for our new Microsoft Thrusted Signing access. After that, we'll finish development of the code-signing module. We have an EV code-signing and an EV in the cloud certificate now and it's working fine!

    I'll keep you posted. It would great, if you could test it when available.

    Friedrich
  • 08-28-2024, 09:23 AM
    ccordes

    Cannot use codesigning with in cloud certificate

    Hello,
    Is there any way that SB could use the thumbprint of the certificate rather than the PFX and password?
    Signtool works perfectly using the /SHA1 tag and the certificate thumbprint. Everything else is the same. I always thought that it shells out or calls signtool to codesign itself.
    Right now I have it working by turning off the Add a Digital Signature, Installer Integrity Check and Verify Code-Signed At Startup.
    FYI - I have the same problem in anything that auto-codesigns during/after a compile.
    Is there another work around for this?

    Thanks

Posting Permissions

  • You may post new threads
  • You may post replies
  • You may not post attachments
  • You may not edit your posts
  •