PDA

View Full Version : Armadillo + Code signing + Vista manifest



NewsArchive
04-10-2008, 02:02 AM
Hi all,

My resident armadillo expert, Charles Edmonds, seems to be taking a
nap right now;)

I'm working on an install where one of the exes is protected with
Armadillo. I'm also using SB to code sign and add a vista manifest.

The way I'm doing this is:

1. Protect with Armadillo
2. Add Vista manifest
3. Code sign.

I have a feeling that I need to change it to:

1. Add Vista manifest
2. Code sign.
3. Protect with Armadillo

Can someone verify that this is correct or set me stright if it
isn't<g>

Best regards,

Arnór Baldvinsson
Icetips Creative, Inc.
San Antonio, Texas, USA
www.icetips.com


Subscribe to information from Icetips.com:
http://www.icetips.com/subscribe.php

NewsArchive
04-10-2008, 02:02 AM
Hi all,

>My resident armadillo expert, Charles Edmonds, seems to be taking a
>nap right now;)

Ok, he's up<g> Thanks Charles:)

Best regards,

Arnór Baldvinsson
Icetips Creative, Inc.
San Antonio, Texas, USA
www.icetips.com


Subscribe to information from Icetips.com:
http://www.icetips.com/subscribe.php

NewsArchive
04-10-2008, 02:03 AM
>>My resident armadillo expert, Charles Edmonds, seems to be taking a
>>nap right now;)
>
> Ok, he's up<g> Thanks Charles:)

I see - a guy can't even take a nature break<g>

;-)

Charles


--
-------------------------------------------------------------------------------------------------------
Charles Edmonds
www.pagesnip.com - "Print and Save the Web, just the way you want it!"
www.clarionproseries.com - "Serious imaging tools for Clarion Developers"
www.ezround.com - "Round Corner HTML tables with matching Banners, Buttons
and Forms!"
www.lansrad.com - "Intelligent Solutions for Universal Problems"
www.fotokiss.com - "World's Best Auction Photo Editor"
-------------------------------------------------------------------------------------------------------

NewsArchive
04-10-2008, 02:04 AM
> Hi all,
>
> My resident armadillo expert, Charles Edmonds, seems to be taking a
> nap right now;)
>
> I'm working on an install where one of the exes is protected with
> Armadillo. I'm also using SB to code sign and add a vista manifest.

Arnór,

OK, so you woke Charles up - HE gives the answer, and YOU don't post it?!

Previous answer I got in an email from Charles:

(My question to Charles)

In SetupBuilder 6.5

Embed the Vista Manifest
Call Armadillo to then protect the EXE
THEN do code sign, right

Is that the correct sequence?

Yes (Charles)

BTW, he told me to do this in the SB Script Editor

- All just before Create Folders

Of course - #run batch file to Armadillo protect inside SB

AND don't forget, you can't embed the Vista manifest inside SB if Armadillo
protected already using this method, so you might need to UNProtect the EXE
just before you run all this SB automation!

David


--
From David Troxell - Product Scope 7 - Encourager Software
Clarion Third Party Profile Exchange Online
http://encouragersoftware.com/profile/clarlinks.html
http://www.encouragersoftware.com/
http://www.profileexchanges.com/blog/

NewsArchive
04-10-2008, 02:05 AM
Hi David,

>OK, so you woke Charles up - HE gives the answer, and YOU don't post it?!

Sorry, didn't have time and presumed everybody else knew this<g>

Best regards,

Arnór Baldvinsson
Icetips Creative, Inc.
San Antonio, Texas, USA
www.icetips.com


Subscribe to information from Icetips.com:
http://www.icetips.com/subscribe.php

NewsArchive
04-10-2008, 02:06 AM
Armadillo sees adding manifest to a protected app as a change (i.e.,
corruption) and will choke. Therefore, manifest needs to be included first.

Armadillo doesn't see code-signing as a change, so code-signing should be
done last.

Code-signing sees ANY change as a corruption (especially something as
radical as wrapping the app with Armadillo), so code-signing should be done
last.

Much as I love SB, my own preference is:
1. Link in a Vista-aware manifest in my Clarion compile process
2. Run a batch file at the end of the compile. Batch file first protects
with Armadillo, then code-signs.

It's a complete no-brainer even a blonde can live with.....

Jane Fleming

NewsArchive
04-10-2008, 02:07 AM
Hi Jane,

>Much as I love SB, my own preference is:
>1. Link in a Vista-aware manifest in my Clarion compile process
>2. Run a batch file at the end of the compile. Batch file first protects
>with Armadillo, then code-signs.

Do you have both of those in articles on ClarionMag? I will look into
this when I'm done with this release and see what I can do:)

Best regards,

Arnór Baldvinsson
Icetips Creative, Inc.
San Antonio, Texas, USA
www.icetips.com


Subscribe to information from Icetips.com:
http://www.icetips.com/subscribe.php

NewsArchive
04-10-2008, 02:07 AM
Arnór,

The manifests I use, a screen shot showing linking a manifest in the Clarion
IDE (same screen shot would work for a PRJ project as well), and the batch
file I use for Armadillo and code-signing are in this article:
http://www.clarionmag.com/cmag/v9/v9n04vista2b.html

Jane

NewsArchive
04-10-2008, 02:08 AM
Hi Jane,

>The manifests I use, a screen shot showing linking a manifest in the Clarion
>IDE (same screen shot would work for a PRJ project as well), and the batch
>file I use for Armadillo and code-signing are in this article:
>http://www.clarionmag.com/cmag/v9/v9n04vista2b.html

THANK you SO much for this:) I don't keep up with all the good stuff
that you post!

One question: I know you use signtool. From the docs on MSDN I don't
see how that works with .pvk and .spc files? Ok, my guess is that you
use pvk2pfx (http://msdn2.microsoft.com/en-us/library/aa906332.aspx)
to convert it?

Best regards,

Arnór Baldvinsson
Icetips Creative, Inc.
San Antonio, Texas, USA
www.icetips.com


Subscribe to information from Icetips.com:
http://www.icetips.com/subscribe.php

NewsArchive
04-10-2008, 02:08 AM
Yes, I discussed pvk2pfx in an earlier article on code-signing:
http://www.clarionmag.com/cmag/v8/v8n11signing2.html

Jane Fleming

NewsArchive
04-10-2008, 02:09 AM
> My resident armadillo expert, Charles Edmonds, seems to be taking a
> nap right now;)

Shame on you!

You know I never sleep<g>

I just had my head down working on "the next great thing" instead of
checking the NG or E-mail<g>.


;-)

Charles


--
-------------------------------------------------------------------------------------------------------
Charles Edmonds
www.pagesnip.com - "Print and Save the Web, just the way you want it!"
www.clarionproseries.com - "Serious imaging tools for Clarion Developers"
www.ezround.com - "Round Corner HTML tables with matching Banners, Buttons
and Forms!"
www.lansrad.com - "Intelligent Solutions for Universal Problems"
www.fotokiss.com - "World's Best Auction Photo Editor"
-------------------------------------------------------------------------------------------------------

NewsArchive
04-10-2008, 02:10 AM
Of course, another more direct way to get the attention of Charles:

Put an order in for any current product - in the comments area,

"BTW, could you check the newsgroup for a question I asked there."

Charles has a blu-tooth train that runs when signaled by email order
announcement - it "blows the whistle" just as it passes overhead of his
computer setup, he has multiple monitor setup to separately view email
order announcement including comments - he processes the order, then checks
newsgroup! Whew!

Actually, it takes more time to explain this process, than to actually see
it in action! :-D

BTW, sometimes there is a slight delay in this system, Charles, quite the
hobbyist, has several alternative track layouts, and sometimes the train
passes through Georgia before heading back to the main station!

David

--
From David Troxell - Product Scope 7 - Encourager Software
Clarion Third Party Profile Exchange Online
http://encouragersoftware.com/profile/clarlinks.html
http://www.encouragersoftware.com/
http://www.profileexchanges.com/blog/