PDA

View Full Version : Bad day for code signing



NewsArchive
09-19-2008, 02:58 AM
Friedrich,

SB6 can't seem to do code signing today. It happens, but I have two issues
that are exceedingly frustrating. One I have pointed out before has the
potential for data loss.

Given this error, whatever it may mean:

Adding Digital Certificate (Preprocessor)...
Compiler error GEN1053: Code signing process failed. Error Code: 1, or 2

The IDE looses most of its include scripts. I sent you a screen shot of this
some time ago. The data loss occurs if one is not paying attention and saves
the script in that state. You're left with a crippled mess that is only part
of its former self.

The second issue is the error messages themselves. If you have them
documented, please point out where. If they are not, they need to be.
Searching through newsgroup posts or message board pages for this kind of
stuff is time consuming and counterproductive. I am perfectly happy to attempt
working through this stuff myself, but I need something more than meaningless
numbers to do it.

Thanks for your help.

--
Best regards,

Mark

-------------------------------------------------------------------
Why waste time learning when ignorance is instantaneous?

NewsArchive
09-19-2008, 02:59 AM
Mark,

What's the expiration date of your certificate?

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

NewsArchive
09-19-2008, 03:00 AM
By the way, we can't reproduce the include script issue (already tried it
when you reported it the first time).

And it's not possible to "document" the code-signing error because the
Microsoft Authenticode tool does not return any error code at all when
code-signing fails. Start signtool.exe and code-sign a test executable to
see what error is displayed.

Hope this helps.

Friedrich

NewsArchive
09-19-2008, 03:00 AM
And another quick note. If your configuration did not change (Windows
update, etc.) and your certificate is valid, make sure that the timestamp
server is accessible (if you make use of this feature).

Friedrich

NewsArchive
09-22-2008, 02:40 AM
>Mark,
>
>What's the expiration date of your certificate?

May 2009. Chcked/did the obvious. Tried both comodo and verisnarl timestamp
servers. Tried permenant (my normal setting) and not. Replaced the files,
lather, rince, repeat. Signing with a PFX file.

--
Best regards,

Mark

-------------------------------------------------------------------
Why waste time learning when ignorance is instantaneous?

NewsArchive
09-22-2008, 02:41 AM
>>What's the expiration date of your certificate?
>
> May 2009. Chcked/did the obvious. Tried both comodo and verisnarl
> timestamp servers. Tried permenant (my normal setting) and not.
> Replaced the files, lather, rince, repeat. Signing with a PFX file.

If the certificate is okay, the time server is accessible and code-signing
still fails then it's something not related to SetupBuilder. For example, a
wrong password.

Hope this helps.

Friedrich

NewsArchive
09-22-2008, 02:41 AM
>>What's the expiration date of your certificate?
>
> May 2009. Chcked/did the obvious. Tried both comodo and verisnarl
> timestamp
> servers. Tried permenant (my normal setting) and not. Replaced the files,
> lather, rince, repeat. Signing with a PFX file.

When code-signing with a PFX, you can use SignCode.exe on one of your test
files and see what error is displayed.

Friedrich

NewsArchive
09-22-2008, 02:42 AM
> Signing with a PFX file.

This could be too obvious, but I'll ask, do you have SignCode.Exe in Tools |
Options | File Locations | Digital Signature (first entry field)?

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

NewsArchive
09-22-2008, 02:42 AM
>> Signing with a PFX file.
>
>This could be too obvious, but I'll ask, do you have SignCode.Exe in Tools |
>Options | File Locations | Digital Signature (first entry field)?

I have signtool.exe. That's the correct program for use with PFX, isn't it?

--
Best regards,

Mark

-------------------------------------------------------------------
Why waste time learning when ignorance is instantaneous?

NewsArchive
09-22-2008, 02:43 AM
Hi Mark,

> I have signtool.exe. That's the correct program for use with PFX, isn't
> it?

Yes, signtool.exe is the correct program.

Friedrich

NewsArchive
09-22-2008, 02:43 AM
>By the way, we can't reproduce the include script issue (already tried it
>when you reported it the first time).
>
>And it's not possible to "document" the code-signing error because the
>Microsoft Authenticode tool does not return any error code at all when
>code-signing fails. Start signtool.exe and code-sign a test executable to
>see what error is displayed.

Friedrich,

Tried that using signtool's wizard. When it fails it writes a generic string
to the console. It contains no useful information. Kind of like Chrome's "go
boom". :)

As you said, the signing failure is not an SB issue. I didn't really have that
in mind in my whine about the error message. I still have no idea what the
problem is, but given that it worked fine two days ago I'll pin it down
eventualy.

Thanks again for your help.

BTW, saw your other post. Can't wait for SB Ultimate.

--
Best regards,

Mark

-------------------------------------------------------------------
Why waste time learning when ignorance is instantaneous

NewsArchive
09-22-2008, 02:44 AM
Mark,

> Tried that using signtool's wizard. When it fails it writes a generic
> string to the console. It contains no useful information. Kind of like
> Chrome's "go boom". :)

:)

> As you said, the signing failure is not an SB issue. I didn't really
> have that in mind in my whine about the error message. I still have no
> idea what the problem is, but given that it worked fine two days ago
> I'll pin it down eventualy.

Thanks for the follow up!

>
> BTW, saw your other post. Can't wait for SB Ultimate.
>

:)

Friedrich

NewsArchive
09-25-2008, 01:46 AM
Search for my post below. It has a BAT file attached that lets you run the code
sign process and see the exact problems and error messages:
Subject: Code Signing Problem Help - SignCode.exe Test Batch file
From: Carl Barnes, Sun, Apr 1 2007 3:02 pm



-----------
Carl Barnes
www.carlbarnes.com
Maker of CW Assistant, Clarion Source Search,
CHM4Clarion - Add Html Help to C5, 5.5, 6 and 7 with just 4 lines of code

NewsArchive
09-25-2008, 01:46 AM
>Search for my post below. It has a BAT file attached that lets you run the code
>sign process and see the exact problems and error messages:
>Subject: Code Signing Problem Help - SignCode.exe Test Batch file
>From: Carl Barnes, Sun, Apr 1 2007 3:02 pm

Thanks, Carl.

--
Best regards,

Mark

-------------------------------------------------------------------
Why waste time learning when ignorance is instantaneous?