PDA

View Full Version : Code Signing failed



NewsArchive
12-13-2007, 03:34 AM
Hi Friedrich ,

Since this morning and the new weather down here :)
I cannot use the code signing in latest SB "compiler error GEN1053 : code
signing process failed

yesterday all was fine

I tried on several of my installer scripts with the same error on all exe's

I reloaded the pkey.exe you had sent me as I cannot use your shipped one and
same pb.....

Of course I need to send on Internet an update etc ... <BG> help Monsieur!

Merci

JP

--
Merci - Thank you

JP

Data Management Center
A tool which let's you Import Export Transfer your data so easily ...
http://www.dm8.fr

NewsArchive
12-13-2007, 03:36 AM
Hi Jean-Pierre,

Perhaps your certificate expired ;-) Or, if you timestamp, the timestamp
server is not available?

It's not caused by SetupBuilder itself.

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder 6.7
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

NewsArchive
12-13-2007, 03:36 AM
I checked the date and it is dec 2008 ....
Thanks for the tip
i'll check all this now

JP

--
Merci - Thank you

JP

Data Management Center
A tool which let's you Import Export Transfer your data so easily ...
http://www.dm8.fr

NewsArchive
12-13-2007, 03:37 AM
Hi Jean-Pierre,

Just checked this and the same happens here. The Comodo timestamp server is
down:

http://timestamp.comodoca.com/authenticode

"This site is currently undergoing scheduled maintenance. We will be back
shortly."

Just switch to the Verisign timestamp server for now and you are done ;-)

Friedrich

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder 6.7
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

NewsArchive
12-13-2007, 03:37 AM
The certificate is there all right on my server ..
BUT
http://timestamp.comodoca.com/authenticode
sends an error of bad gateway 502

would you know if comodo changed something ??

JP

--
Merci - Thank you

JP

Data Management Center
A tool which let's you Import Export Transfer your data so easily ...
http://www.dm8.fr

NewsArchive
12-13-2007, 03:38 AM
No, their timestamp server is down at the moment:

"This site is currently undergoing scheduled maintenance. We will be back
shortly."

You can temporarily switch to the Verisign server:

http://timestamp.verisign.com/scripts/timstamp.dll

Does this help?

Friedrich

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder 6.7
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

NewsArchive
12-13-2007, 03:39 AM
It is even better than before as NOW the exe's are time stamped when before
they were not

Can I use this verisign a long time ?

Merci

JP

--
Merci - Thank you

JP

Data Management Center
A tool which let's you Import Export Transfer your data so easily ...
http://www.dm8.fr

NewsArchive
12-13-2007, 03:39 AM
Hi Jean-Pierre,

The Comodo timestamp server is back online:

http://timestamp.comodoca.com/authenticode

You can use the Verisign thing, but it's not recommended. Their server is
"offline" several times a week. The Comodo server is very, very stable. I
think they did some maintenance this morning.

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder 6.7
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

NewsArchive
12-13-2007, 03:40 AM
I removed that line from my script and all is again fine in timestamp url

Now to contact comodo ....

JP

--
Merci - Thank you

JP

Data Management Center
A tool which let's you Import Export Transfer your data so easily ...
http://www.dm8.fr

NewsArchive
12-13-2007, 03:40 AM
Jean-Pierre,

There is no need to contact Comodo ;-)

And do not ship anything without a timestamp! NEVER EVER!!!!! So please
add the line back to your script <g>

Friedrich

NewsArchive
12-13-2007, 03:41 AM
The Comodo timestamp server is back online:

http://timestamp.comodoca.com/authenticode

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder 6.7
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

NewsArchive
12-13-2007, 03:41 AM
I have been sending on Internet all my updates for under a YEAR and never
checked this but all the last ones are not time stamped by that comodo
server
Wheras the verisign one just now did it perfectly ??

Well it is out of your knowledge maybe so i'll try again comodo and if it
does not work properly will contact them directly...

At least we found a 'time zone' where the two parallel worlds existed <BG>
and I was in a different one :)

Merci again to be so responsive to your users Friedrich

JP

--
Merci - Thank you

JP

Data Management Center
A tool which let's you Import Export Transfer your data so easily ...
http://www.dm8.fr

NewsArchive
12-13-2007, 03:42 AM
Hi Jean-Pierre,

Comodo did a scheduled maintenance this morning. It's recommended to always
use the Comodo server to timestamp your code-signed files. If the Comodo
server is down, you can always temporarily switch to the Verisign server:

http://timestamp.verisign.com/scripts/timstamp.dll

But the Comodo server is very, very stable! So your default timestamp
settings should always point to Comodo:

http://timestamp.comodoca.com/authenticode

Friedrich

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder 6.7
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

NewsArchive
12-13-2007, 03:42 AM
Friedrich,

merci for this too .

Just another question : Are the exe's on the hd (the ones used to be coded
signed by SB) supposed to be codesigned after the SB script runs and the
installer is created please ?

I compile in dir x and copy to dir y then run SB from y
Is exe in y supposed to be code signed on my hd after SB runs or only the
one 'in' the installer exe - to be more precise :)

JP


--
Merci - Thank you

JP

Data Management Center
A tool which let's you Import Export Transfer your data so easily ...
http://www.dm8.fr

NewsArchive
12-13-2007, 03:43 AM
Hi Jean-Pierre,

It depends on your "Permanent" checkbox setting in "#code-sign application".
If this checkbox is not marked, the compiler leaves the original file
untouched. The compiler creates a temporary copy of the file and after
script compilation restores it to the original. If you wish to permanently
code-sign an application (file stays code-signed after the compilation
process), mark this checkbox.

Does this help?

BTW, the same is true for "#embed Vista manifest"

Friedrich

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder 6.7
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

NewsArchive
12-13-2007, 03:43 AM
In other words, if the "Permanent" checkbox is not marked, the file is only
code-signed in your installation package. The file on your hard-drive is
not signed!

Friedrich

NewsArchive
12-13-2007, 03:44 AM
Friedrich,

It seems that before this morning's comodo changes : my exe's and
installer's were not time stamped properly though code signed and the hd exe
was code signed without the time stamp ....
Now this is also maybe caused by whatever reason prohibits me from using the
shipped pkey.exe on my machine ....

But since this morning after checking as per your helpfull indication, all
is fine and perfect

Merci again

JP

--
Merci - Thank you

JP

Data Management Center
A tool which let's you Import Export Transfer your data so easily ...
http://www.dm8.fr

NewsArchive
12-13-2007, 03:44 AM
Hi Jean-Pierre,

Whenever there is a code-signing problem, the compiler will report an error.
I don't think that it has anything to do with pkey.exe.

BTW, if the shipped pkey.exe does not work, move from SignCode to
Signtool.exe. Microsoft does not allow to redistribute this file, so please
check the following link:

http://www.lindersoft.com/forums/showthread.php?t=2202

And this one (see "Obtaining the Microsoft Code Signing Files")

http://www.wiscocomputing.com/articles/code-signing.htm

HTH,

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder 6.7
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner