PDA

View Full Version : Code signing... again!



NewsArchive
11-17-2008, 01:40 AM
Been trying to solve these questions on Google but cannot find answers.
(1) You have an app that is upgraded every few months. Can the same
signature be used for each new release?
(2) You have a number of apps with upgrades during the perions of the
signature. Can the one Signature be used for all apps and upgrades?
(3) Who makes all of the moolah that code signing generates?
Thanks
Nev

NewsArchive
11-17-2008, 01:41 AM
The "signature" is a hash of the signed code, which can flag any alteration
or corruption. So the signature is per-item.

The signature is based on your certificate. You buy the certificate for 1,
2, 3 (or possibly more) years.

You can use that certificate to sign any of your code as long as the
certificate is valid.

The certification companies make the moolah.

Jane Fleming

NewsArchive
11-17-2008, 01:42 AM
Thanks Jane
Think I need shares in the moolah companies!
So the certificate is to license the vendor not the product for the period
of the license for as many products as the vendor wishes to license?
Thanks
Nev

NewsArchive
11-17-2008, 01:42 AM
Hi nev

>So the certificate is to license the vendor not the product for the period
>of the license for as many products as the vendor wishes to license?

Yes. with 1 certificate you can code-sign 1,000,000 .EXEs if you want.

John Griffiths

NewsArchive
11-17-2008, 01:43 AM
> Been trying to solve these questions on Google but cannot find answers.
> (1) You have an app that is upgraded every few months. Can the same
> signature be used for each new release?

No you have to buy a new one.

Click here:

http://www.paypal.com/pay-big-bucks-to-Charles.html

> (2) You have a number of apps with upgrades during the perions of the
> signature. Can the one Signature be used for all apps and upgrades?

No you have to buy a new one.

Click here:

http://www.paypal.com/pay-big-bucks-to-Friedrich.html

> (3) Who makes all of the moolah that code signing generates?

http://www.Charles-and-Friedrich.com


;-)

Charles



--
-------------------------------------------------------------------------------------------------------
Charles Edmonds
www.setupcast.com - "A revolutionary new publishing system for software
developers - enhanced for SetupBuilder users!"
www.pagesnip.com - "Print and Save the Web, just the way you want it!"
www.clarionproseries.com - "Serious imaging tools for Clarion Developers"
www.ezround.com - "Round Corner HTML tables with matching Banners, Buttons
and Forms!"
www.lansrad.com - "Intelligent Solutions for Universal Problems"
www.fotokiss.com - "World's Best Auction Photo Editor"
-------------------------------------------------------------------------------------------------------

NewsArchive
11-17-2008, 01:44 AM
Jeez! The comedians are out in force!
Different prices from different resellers for Comodo licenses. Some 3 year
licenses are the same price per year as a one year license. What is the
advantage? (Just checking on Google) Some Aussie license are different price
to USA Licenses. Without promoting Friedrich's, How do you tell which is the
genuine article or the full bottle? Is a three year license the same license
as a one year license except it is valid for three years and not one? Gotta
get the facts.
Nev

NewsArchive
11-17-2008, 01:45 AM
Nev,

> Jeez! The comedians are out in force!
> Different prices from different resellers for Comodo licenses. Some 3 year
> licenses are the same price per year as a one year license. What is the
> advantage? (Just checking on Google) Some Aussie license are different
> price to USA Licenses. Without promoting Friedrich's, How do you tell
> which is the genuine article or the full bottle? Is a three year license
> the same license as a one year license except it is valid for three years
> and not one? Gotta get the facts.

A 3-year Comodo license costs $500. But SetupBuilder users can get the same
original Comodo code-signing certificate for just $200 (because we have a
special agreement with Comodo any pay additional fees).

The three year certificate is valid for 3 years, the one year certificate is
valid for 1-year. It's the same type of certificate, only the validity is
different. I would order the 3-year certificate. Otherwise, you have to go
through the identification process again next year.

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

SetupBuilder "point. click. ship"
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

NewsArchive
11-17-2008, 01:45 AM
As an additional note, SetupBuilder users buy the discounted original Comodo
certificate directly from Comodo. We do not make any profit on it and, on
the contrary, even have to pay fees to provide this service to our
customers.

Friedrich

NewsArchive
11-17-2008, 01:46 AM
> Jeez! The comedians are out in force!

Not around here!

Say it isn't so Nev<g>


> Gotta get the facts.

What Friedrich said.

One VERY important thing.

Buy the THREE year (even if you have to skip the house payment for a
month<g>).

Doing so means that you are getting the best deal, but it also means that
you don't have to prove yourself to Comodo again for another three years!

Whatever money you might save in cash flow by getting a one year
certificate is not worth having to go through the hassle with Comodo each
year.

Getting the three year will help you save your money ... and your sanity!

;-)

Charles



--
-------------------------------------------------------------------------------------------------------
Charles Edmonds
www.setupcast.com - "A revolutionary new publishing system for software
developers - enhanced for SetupBuilder users!"
www.pagesnip.com - "Print and Save the Web, just the way you want it!"
www.clarionproseries.com - "Serious imaging tools for Clarion Developers"
www.ezround.com - "Round Corner HTML tables with matching Banners, Buttons
and Forms!"
www.lansrad.com - "Intelligent Solutions for Universal Problems"
www.fotokiss.com - "World's Best Auction Photo Editor"
-------------------------------------------------------------------------------------------------------

NewsArchive
11-17-2008, 01:46 AM
Not all Comodo (or Verisign) certificates are the same.
You must buy one that is designed for code signing, not one for email
authentication, for putting SSL (HTTPS) on a web server, or any of the other
uses.

Jane

NewsArchive
11-17-2008, 01:47 AM
Thanks Guys
I've got the 'facts' at last. Just need to ask and all will be revealed.
Definitely better then Google!
Thanks
Nev