PDA

View Full Version : [Clarion Folk] Quick Tutorial, Code Signing Your Own Exes/DLLs in SetupBuilder



NewsArchive
01-15-2009, 01:16 AM
Folks,

Have put up a walkthrough (tutorial) on using SetupBuilder to code-sign your
own Exes/DLLs. It's really, really simple.

http://clarionfolk.com/2009/01/14/code-signing-your-own-exesdlls-in-setupbuilder/

Cheers,

Stu Andrews
http://clarionfolk.com

NewsArchive
01-15-2009, 01:17 AM
Thanks Andrew!

Richard Rose

NewsArchive
01-15-2009, 01:17 AM
Richard,

No probs.

Cheers,

Stu Andrews
http://clarionfolk.com

NewsArchive
01-15-2009, 01:32 AM
> Folks,
>
> Have put up a walkthrough (tutorial) on using SetupBuilder to code-sign your
> own Exes/DLLs. It's really, really simple.
>
> http://clarionfolk.com/2009/01/14/code-signing-your-own-exesdlls-in-setupbuilder/

Stu,

Thanks for sharing - I'd suggest adding the TimeStamp URL.

You will definitely put some of the "newbie" code signers at ease with your
easy to follow instructions!

David

--
From David Troxell - Product Scope 7 - Encourager Software
Clarion Third Party Profile Exchange Online
http://encouragersoftware.com/profile/clarlinks.html
Profile Exchanges - www.encouragersoftware.com/profile/
http://www.profileexchanges.com/blog/

NewsArchive
01-15-2009, 01:32 AM
David,

Thanks muchly. And yeah, I need to understand that TimeStamp URL. Must read
doco :)

Cheers,

Stu Andrews
http://clarionfolk.com

NewsArchive
01-15-2009, 01:33 AM
> David,
>
> Thanks muchly. And yeah, I need to understand that TimeStamp URL. Must read
> doco :)

Stu,

The practical side of timestamping is answered in this Comodo FAQ:

http://www.instantssl.com/code-signing/code-signing-faq.html

"Is timestamped code valid after a Code Signing Certificate expires?

Timestamping ensures that code will not expire when certificate expires. If
your code is timestamped the digital signature is valid even though the
certificate has expired. A new certificate is only necessary if you want to
sign additional code. If you did not use the timestamping option during the
signing, you must re-sign your code and re-send it out to your customers"

David

--
From David Troxell - Product Scope 7 - Encourager Software
Clarion Third Party Profile Exchange Online
http://encouragersoftware.com/profile/clarlinks.html
Profile Exchanges - www.encouragersoftware.com/profile/
http://www.profileexchanges.com/blog/

NewsArchive
01-16-2009, 01:58 AM
David,

Ahhhh, that means it's quite important! Thanks muchly.

Cheers,

Stu Andrews
http://clarionfolk.com

NewsArchive
01-16-2009, 01:59 AM
So is the http that I use on my regular signing (right after the /t command)
the same http that I would put into the setupbuilder field?

Ray
VMT

NewsArchive
01-16-2009, 02:00 AM
Ray,

> So is the http that I use on my regular signing (right after the /t
> command) the same http that I would put into the setupbuilder field?

Yes! For example:

http://timestamp.comodoca.com/authenticode

-or-

http://timestamp.verisign.com/scripts/timstamp.dll


--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

SetupBuilder "point. click. ship"
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner