PDA

View Full Version : Smartscreen tackles my signed EXE



NewsArchive
01-04-2018, 03:06 AM
Hello Friedrich and all others!

Now that I have my certificate I am able to successfully code-sign my programs.

However, Windows 10 does not care much.....

I copied the entire directory-structure via ZIP-file to another computer,
unzipped somewehere on the D:\-drive.
When I start those programs now I get a warning like in the attached image.
(Note beside: The contents of "Herausgeber" (engl: issuer) is from the filed
"Description" in the code-signing dialogue of SB10)

The warning appears, no matter if the Manifest is included by SB or is a
separate file, generated by the IDE.

When I call those programs two times in a row, the third start is then without
the warning. Windows seemed to be able to learn. <g>

And, of course, strange enough, not all of my program trigger this warning.
Which does not make it better.

My suspicion is, that this has to do with the fact that the programs do not sit
in C:\Program Files\. My experience is, that the admins at the customer sites
don't want the program installed in there, they prefer other directories.
Either in the root of another drive or somewhere in C:\Users\All
Documents\blabla.

First: such a warning by the OS dies not look good!
Second: One program is meant to run as a service. Imagine how it looks, that
nothing works, but all that just because there is an invisible warning sitting
and waiting for a response.

Attachment: (well, link, because attachements still do not work here)
http://downloads.odata.de/Setupbuilder/screenshot_smartscreen_warning.PNG

Is there any chance to mend this?

Regards,
Wolfgang Orth
www.odata.de

Please note:
From time to time it happens, that I overlook a reply to my postings.
Please don't be angry.
In case of an emergency, try to contact me via mail.

Bitte beachten:
Von Zeit zu Zeit passiert es mir, dass ich Antworten auf meine Postings übersehe.
Bitte nicht böse sein.
Im Notfall bitte Kontakt per Mail versuchen.







.

NewsArchive
01-04-2018, 03:08 AM
Maybe Ville is right and we should all switch to linux.

If you look at the .EXE properties on that Win10 machine, do you at
least see the certificate tab?

Jeff Slarve
www.jssoftware.com

you know what happens when you assuage

NewsArchive
01-04-2018, 03:08 AM
>Maybe Ville is right and we should all switch to linux.
>

What would that help, if our customers do not switch with us?

And, even a bit more important, is there a Clarion for Linux?

hmmmmm......

>If you look at the .EXE properties on that Win10 machine, do you at
>least see the certificate tab?
>

Yes

The EXEs have the manifest embeded by SB and are code-signed with SHA256

Regards,
Wolfgang Orth
www.odata.de

Please note:
From time to time it happens, that I overlook a reply to my postings.
Please don't be angry.
In case of an emergency, try to contact me via mail.

Bitte beachten:
Von Zeit zu Zeit passiert es mir, dass ich Antworten auf meine Postings übersehe.
Bitte nicht böse sein.
Im Notfall bitte Kontakt per Mail versuchen.

NewsArchive
01-04-2018, 03:09 AM
I found this by google. Don't know the author or his software:

https://www.ctrl.blog/entry/how-to-false-smartscreen-positive

Jeff Slarve
www.jssoftware.com

you know what happens when you assuage

NewsArchive
01-04-2018, 03:09 AM
>I found this by google. Don't know the author or his software:
>
>https://www.ctrl.blog/entry/how-to-false-smartscreen-positive
>

Thanks for that link, Jeff!

I already expected this to be a "reputation" thingie. Friedrich once reported
about that, when he tried to get his latest Installer to run. In my case its
not teh Installer yet, its the single EXEs of my program. Intersting though
was, that just the webserver itself (!) did not trigger the Smartscreen
Hypertension Crisis, but the client and the admin-program.

Anyway, because there are some little changes to be expected in my program,
before it gets published later this month, I will postpone my struggle for
"reputation".

Thanks
Wolfgang

NewsArchive
01-08-2018, 10:49 AM
Hi Wolfgang,

yes, it's definitely a reputation thing. Similar to this:

http://www.lindersoft.com/forums/showthread.php?46865

http://www.lindersoft.com/forums/showthread.php?46866

http://www.lindersoft.com/forums/showthread.php?46881

And we have to go through this again in August. Argh!

Friedrich