PDA

View Full Version : Code Signing Question



NewsArchive
09-20-2018, 04:17 AM
1. If I get code signing for one of my programs then
a customer asks for a report change
do I have to purchase the code signing all overf again after I incorporate the report?

2. Also, does code signing cover all the dlls used by the program?
Would a change in my report DLL require a new code-signing?

This could get very expensive, I have over 10 programs I may have to get
code-signed because Microsoft screwed me again
(my legacy programs no longer print reports. When I put the exe in a win 32
environment they work)

Thanks for any avice

chris

NewsArchive
09-20-2018, 04:17 AM
Hi Chris,

> 1. If I get code signing for one of my programs then
> a customer asks for a report change
> do I have to purchase the code signing all overf again after I incorporate the report?


No. A code signing certificate can be used for the length of time it is
for (1, 2, 3 or more years) and it can be used to sign unlimited number
of exe/dlls during that time. It just verifies who you are.

> 2. Also, does code signing cover all the dlls used by the program?
> Would a change in my report DLL require a new code-signing?


Yes. Any changes will require a code sign as it is embedded into the
binary file.

Best regards,


--
Arnor Baldvinsson
Icetips Alta LLC

NewsArchive
09-20-2018, 04:18 AM
> or more years)


I'd like to know where to get that one......

Best Regards...

Roberto Renz

NewsArchive
09-20-2018, 04:18 AM
Roberto,

> > or more years)
>
> I'd like to know where to get that one......

It's an Arnor only special issue - not for us mere mortals!<g>

--
Lee White

RPM Report Viewer.: http://www.cwaddons.com/products/rpm/
Report Faxing.....: http://www.cwaddons.com/products/afe/
---Enroll Today---: http://CWaddons.com

Creative Reporting: http://www.CreativeReporting.com

Product Release & Update Notices
http://twitter.com/DeveloperPLUS

NewsArchive
09-20-2018, 04:19 AM
>> or more years)
>
>
> I'd like to know where to get that one......

As far as I know, the 5 years option is not available any more.

--
Friedrich Linder
Lindersoft | SetupBuilder | www.lindersoft.com
Voice: +1.954.537.3701 | Fax: +1.954.537.3702

--SetupBuilder "point. click. ship"
--Helping You Build Better Installations
--Create Windows 10 ready installations in minutes
--Official COMODO Code Signing and SSL Certificate Partner

NewsArchive
09-20-2018, 04:19 AM
Hi Roberto,

>
> I'd like to know where to get that one......


Not sure. Seem to recall that 5 year certificates were available
somewhere. Maybe not<g>

Best regards,

--
Arnor Baldvinsson
Icetips Alta LLC

NewsArchive
09-20-2018, 04:20 AM
Yes there is. Its from Verisign. Comodo has only 1, 2 and 3 year certificates.



Regards,
Wolfgang Orth
www.odata.de

Please note:
From time to time it happens, that I overlook a reply to my postings.
Please don't be angry.
In case of an emergency, try to contact me via mail.

Bitte beachten:
Von Zeit zu Zeit passiert es mir, dass ich Antworten auf meine Postings übersehe.
Bitte nicht böse sein.
Im Notfall bitte Kontakt per Mail versuchen.

NewsArchive
09-20-2018, 04:21 AM
Chris,

as the others said.

That 1, 2, or 3 year period is the time, where you can sign your binary data.
One certificate for all.

As a note: If you sign against a timeserver, like
http://timestamp.comodoca.com?td=sha256 or any other, then your software is
code-signed indefinetily. If you do not, then your EXE, DLL etc expire the same
day as your certificate does. So always use one of those timeserver. The most
easy and convenient way to conde-sign is with SetupBuilder. I made a script for
that, so its just a tip with my finger and a few seconds later that tasks is
done.

https://support.comodo.com/index.php?/comodo/Knowledgebase/Article/View/68/7/

Wolfgang

Regards,
Wolfgang Orth
www.odata.de

Please note:
From time to time it happens, that I overlook a reply to my postings.
Please don't be angry.
In case of an emergency, try to contact me via mail.

Bitte beachten:
Von Zeit zu Zeit passiert es mir, dass ich Antworten auf meine Postings übersehe.
Bitte nicht böse sein.
Im Notfall bitte Kontakt per Mail versuchen.

NewsArchive
09-20-2018, 08:06 AM
https://www.ssl.com/certificates/code-signing/buy/

Geoff B

< Never waste the reader's time. >

NewsArchive
09-21-2018, 10:22 AM
Hi Friedrich,

> As far as I know, the 5 years option is not available any more.

Maybe I was confusing it with the timer server certificates which seems
to be like 20 years or something.

Best regards,


--
Arnor Baldvinsson
Icetips Alta LLC

NewsArchive
09-21-2018, 10:27 AM
Thanks, Arnor, just what I needed!

Chris Kloss