PDA

View Full Version : Code Sign Cert Password



NewsArchive
04-19-2019, 01:45 PM
Q: why is the Certificate Password a hidden field?

It's not something I need everyday, so I had to write it down. Couldn't
find it the other day.

So, I had to figure another way.

I don't think it needs to be hidden.

Paul MacFarlane

NewsArchive
04-20-2019, 02:40 PM
Paul,

> Q: why is the Certificate Password a hidden field?
>
> It's not something I need everyday, so I had to write it down. Couldn't
> find it the other day.
>
> So, I had to figure another way.
>
> I don't think it needs to be hidden.

in quite a few companies, only the team leader has access to the
code-signing certificate password. It has to be a hidden field.

You set the certificate password once in the IDE and after that don't touch
it for three years <g>.

Friedrich

NewsArchive
04-20-2019, 02:41 PM
Sort of, yes...g

The last certificate I got was in January at 2am. Wrote it down, used
it in the IDE, released the software.

Needed to make a setup for another project. Spent hours searching for
that paper! Gave up.

The password is easy to hack. Took me 2 minutes. (2 minutes later I
found the paper..g)

So unless SetupBuilder is restricted only to team leaders, making the
password hidden is pointless.

Paul MacFarlane

NewsArchive
04-20-2019, 02:41 PM
Paul,

> Sort of, yes...g

There are two options available that are global and not script level
so that you setup your cert ONCE and it's ready whenever you need it.

Tools|Options

TAB: Code-Signing
This is the global that can be set to override all other uses in any
script.


TAB: Certificate Profiles
This provides a way to setup as many "profiles" as you need. Again the
passwords are retained between uses.

Lee White

NewsArchive
04-20-2019, 02:42 PM
Paul,

> Tools|Options
>
> TAB: Code-Signing
> This is the global that can be set to override all other uses in any
> script.

This is the one I use - set once and forget! Well, until you get your
next certificate that is!<g>

--
Lee White

RPM Report Viewer.: http://www.cwaddons.com/products/rpm/
Report Faxing.....: http://www.cwaddons.com/products/afe/
---Enroll Today---: http://CWaddons.com

Creative Reporting: http://www.CreativeReporting.com

Product Release & Update Notices
http://twitter.com/DeveloperPLUS

NewsArchive
04-20-2019, 02:42 PM
Paul,

exactly what Lee said. Setup the certificate ONCE and you are done.

http://www.lindersoft.com/forums/showthread.php?47199

Friedrich

NewsArchive
04-22-2019, 02:45 PM
Or you need to refresh your workstation.....

Paul MacFarlane

NewsArchive
04-22-2019, 02:45 PM
Maybe SB alone is not a suitable password keeper if you need to
rememeber it later.

Jeff Slarve
www.jssoftware.com

Ones and Zeros are my Heroes