-
I give up code signing.
A Little frustrated. After ordering my certificate. Getting (whois) to
match reality. Finally got a email to pick up my certificate. Got my
collection code. Clicked on the button to retrieve it. Entered my
collection code. Clicked on the button to get it.
It shows installation Then successful. So where is it. What file am I
looking for. It did not ask where to put it or tell me where it put it.
I just need a clue.
--
Thanks
Gary Hoffman
http://www.hoffmancomputersystems.com
-
Re: I give up code signing.
Did you follow the recommendation to get your certificate as a file(s),
rather than installing into the machine's CSP?
Jane Fleming
-
Re: I give up code signing.
I don't know. When ordered I accepted the defaults. I don't remember
asking to get it as a file. That is probably the problem. How do I resolve
it. When I received email, it did say I need to get the certificate from
the same machine I ordered it.
--
Thanks
Gary Hoffman
http://www.hoffmancomputersystems.com
-
1 Attachment(s)
Re: I give up code signing.
I haven't had to do it myself (because I'm a girl and actually read the
directions and do it right the first time! <G>) but a quick Google of
"export code-signing certificate" turns up a number of hits.
Here's one: http://www.tech-pro.net/export-to-pfx.html
Even if you had specified "in a file", BTW, you'd still have needed to use
the same machine to collect it, as mentioned in this PDF:
http://www.beachbunnysoftware.com/webinar/CodeSign.pdf
HTH
Jane Fleming
-
Re: I give up code signing.
I should have had my daughter do it.
--
Thanks
Gary Hoffman
http://www.hoffmancomputersystems.com
-
Re: I give up code signing.
> I haven't had to do it myself (because I'm a girl and actually read the
> directions and do it right the first time! <G>) but a quick Google of
> "export code-signing certificate" turns up a number of hits.
> Here's one: http://www.tech-pro.net/export-to-pfx.html
>
> Even if you had specified "in a file", BTW, you'd still have needed to use
> the same machine to collect it, as mentioned in this PDF:
> http://www.beachbunnysoftware.com/webinar/CodeSign.pdf
Not to take anything away from Gary's "mistakes" in the process - I made
MORE than my share a little less than 3 years ago, and Comodo support
really helped me out -
but THAT is WHY your CodeSign.pdf should be "Mandatory Reading" ! ! ! :-D
David
--
From David Troxell - Product Scope 7.9 - Encourager Software
Product Scope 7 Viewer - NO Registration Fee! Free to Use!
http://www.encouragersoftware.com/
http://www.encouragersoftware.com/pr...fice-2010.html
-
Re: I give up code signing.
Gary,
> I don't know. When ordered I accepted the defaults. I don't remember
> asking to get it as a file. That is probably the problem. How do I
> resolve it. When I received email, it did say I need to get the
> certificate from the same machine I ordered it.
There are quite a few interesting articles available. For example:
http://www.lindersoft.com/forums/showthread.php?t=8279
http://www.beachbunnysoftware.com/webinar/CodeSign.pdf
http://www.lindersoft.com/forums/showthread.php?t=9498
http://www.lindersoft.com/forums/showthread.php?t=23062
I assume you did not use the "into the CSP" option and now you have the
certificate in your certificate "pool" (Internet Explorer -> Tools ->
Internet Options -> Content -> Certificates).
You have to export it to get your hands on a .pfx or .spc/.pvk
Friedrich
-
Re: I give up code signing.
And here is a direct link to the "Converting a PFX file to SPC and PVK
files" Comodo support page:
https://support.comodo.com/index.php...089&nav=0,96,7
Friedrich
-
Re: I give up code signing.
Bearing in mind I am having to go through this process soon myself again I
would like to ask a question:
WHY in these days does (a) the order have to be via an XP machine and (b) is
the process do darned complex. Fortunately I still have XP but being as XP
is not being supported now it seems crazy.
Last time I renewed my 3 year certificate I had to jump through so many
hoops despite sending them copies of my USA company registration, copy of
bank statements, proof of identity etc. etc.
Of course my problem is even more difficult as one company I own is
registered in Florida, the accounts are prepared there but I actually live
in the UK. But in these days that should not be very unusual!
I accept this information has to be sent but even then they make it so
difficult.
This is such a large organization that I cannot believe they can make life
easier to buy something.
Curious and interested.
John Fligg
-
Re: I give up code signing.
Gary,
If you did not follow the recommendation and installed instead, in IE you
can go to tools/Internet Options/Content Tab/Click on Certificates and see
it. Then you can export it as a PFX certificate.
Abe Jimenez
-
2 Attachment(s)
Re: I give up code signing.
Here are some pictures that may help.
Abe Jimenez
-
Re: I give up code signing.
Thanks Abe. I know have a pfx file. Just need to figure out how it becomes
a mykey.spc file. More reading.
I am glad I purchased a 3 year plan. I would hate to do this each year.
--
Thanks
Gary Hoffman
http://www.hoffmancomputersystems.com
-
Re: I give up code signing.
Actually, a pfx file can do you. But you'll need to get signtool.exe from
Microsoft to use it.
There's an explanation in that PDF I mentioned:
http://www.beachbunnysoftware.com/webinar/CodeSign.pdf
David Troxell has a blog with his preferred way to get signtool:
http://profileexchanges.com/download...7-safe-chm.zip
Jane Fleming
-
1 Attachment(s)
Re: I give up code signing.
You don't need signtool. See image.
Abe Jimenez
-
1 Attachment(s)
Re: I give up code signing.
Yes, I see the image.
So you're saying SetupBuilder works for you to code-sign with a PFX file
without having to specify a location for signtool.exe (see image) ?
Jane Fleming
-
Re: I give up code signing.
-
Re: I give up code signing.
Interesting.
I just installed SB on a clean machine, and it wouldn't use a PFX with the
default.
Could you possibly post a screen shot of the same window I posted?
Jane
-
1 Attachment(s)
Re: I give up code signing.
Did your clean install of SB include this file or did a get a special one? Mine is 7.1.2860
Abe Jimenez
-
1 Attachment(s)
Re: I give up code signing.
I installed 7.2.2925.
But I don't understand your question, Abe.
Like every version of SB I can recall installing, it installed the old
signcode.exe, NOT the newer signtool.exe which is needed to use a PFX for
signing.
Jane Fleming
-
Re: I give up code signing.
Jane,
What I'm saying is that I don't recall installing signtool and that it is in
the SB folder (not where MS installer's would have put it). Was this ever
included in the SB install?
Regards,
Abe
-
1 Attachment(s)
Re: I give up code signing.
Not that I know of, Abe.
Perhaps Friedrich can speak to that tomorrow.
The attached from the current SB help file says you have to find and
download it.
Some guy names Jimenez ;-) has something to say about that in this thread:
http://www.lindersoft.com/forums/sho...ht=distributed
Jane
-
Re: I give up code signing.
Never mind. The answer is in a post I made in this newsgroup on 12/2 last
year. Apparently I did install signtool and forgot.
Abe Jimenez
-
Re: I give up code signing.
Welcome to the world of being blonde <G>
Jane Fleming
-
Re: I give up code signing.
I can get gray but not blond :-)
Abe Jimenez
-
Re: I give up code signing.
> I can get gray but not blond :-)
Haven't you heard?
Gray IS the new Blonde<g>
:-)
Charles
--
-------------------------------------------------------------------------------------------------------
Charles Edmonds
www.clarionproseries.com - "Get ProPath, make your Clarion programs ready
for Windows 7 and Vista!"
www.ezchangelog.com - "Free ChangeLog software to manage your projects!"
www.setupcast.com - "A revolutionary new publishing system for software
developers - enhanced for SetupBuilder users!"
www.pagesnip.com - "Print and Save the Web, just the way you want it!"
www.clarionproseries.com - "Serious tools for Clarion Developers"
www.ezround.com - "Round Corner HTML tables with matching Banners, Buttons
and Forms!"
www.lansrad.com - "Intelligent Solutions for Universal Problems"
www.fotokiss.com - "World's Best Auction Photo Editor"
-------------------------------------------------------------------------------------------------------
-
1 Attachment(s)
Re: I give up code signing.
Sorry. Never looked at that. I guess SB put it there. I sure as heck don't remember installing it.
Abe Jimenez
-
Re: I give up code signing.
The problem is that Microsoft changed its redistribution license, and
Friedrich (and others) aren't allowed to distribute it. So he supplies the
old signcode.exe which pops up a window and doesn't work with PFX files.
Unless something has changed...
But as I just posted, you made me curious so I installed the latest
pre-release version on a new machine and it installed signcode, not
signtool. And signcode won't work with a pfx.
Jane
-
Re: I give up code signing.
Maybe I got in before the rules changed. This was in Nov last year.
Abe Jimenez
-
Re: I give up code signing.
Hi Jane,
> The problem is that Microsoft changed its redistribution license, and
> Friedrich (and others) aren't allowed to distribute it. So he supplies
> the old signcode.exe which pops up a window and doesn't work with PFX
> files.
>
> Unless something has changed...
> But as I just posted, you made me curious so I installed the latest
> pre-release version on a new machine and it installed signcode, not
> signtool. And signcode won't work with a pfx.
You are right. SetupBuilder never installed a version of signtool.exe
(required to make use of the .pfx).
Friedrich
--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910
SetupBuilder is Windows 7 installation -- "point. click. ship"
-- Official Comodo Code Signing and SSL Certificate Partner
-
Re: I give up code signing.
> Actually, a pfx file can do you. But you'll need to get signtool.exe from
> Microsoft to use it.
>
> There's an explanation in that PDF I mentioned:
> http://www.beachbunnysoftware.com/webinar/CodeSign.pdf
>
> David Troxell has a blog with his preferred way to get signtool:
> http://profileexchanges.com/download...7-safe-chm.zip
Gary,
You must understand - I DO defer to Jane's expert opinion on everything
related to Code Signing - EXCEPT for obtaining signtool.exe! :-D
The link posted above is the CHM version of the blog (the blog itself only
describes what is in the CHM) - refer to help topic - Signtool.exe
You Download and install a small Windows SDK Setup Wizard file -
winsdk_web.exe - on install options - only check Win32 Development tools -
see screen shot - and it installs signtool.exe - pvk2pfx.exe to a location
you have chosen.
David
--
From David Troxell - Product Scope 7.9 - Encourager Software
Product Scope 7 Viewer - NO Registration Fee! Free to Use!
http://www.encouragersoftware.com/
http://www.encouragersoftware.com/pr...fice-2010.html
-
Re: I give up code signing.
Gary,
Are you set now? I know Jane and I sort of drifted away from your issue.
Abe Jimenez
-
Re: I give up code signing.
Did you by any chance use Firefox when downloading? Don't do that! (Trust
me, I've been there).
Follow the links provided by Friedrich to correct.
HTH
Peter
-
Re: I give up code signing.
I used internet explorer.
--
Thanks
Gary Hoffman
http://www.hoffmancomputersystems.com
-
Re: I give up code signing.
>I used internet explorer.
Have you tried searching for the file?
Any mykey.* with the correct date?
Steve
--
Neural Planner Software Ltd www.NPSL1.com
EasyNN-plus. Neural Networks plus. www.easynn.com
SwingNN. Forecast with Neural Networks. www.swingnn.com
JustNN. Just Neural Networks. www.justnn.com
-
Re: I give up code signing.
Hi John,
> Bearing in mind I am having to go through this process soon myself again I
> would like to ask a question:
>
> WHY in these days does (a) the order have to be via an XP machine and (b)
> is the process do darned complex. Fortunately I still have XP but being as
> XP is not being supported now it seems crazy.
Absolutely. But that's a question for Microsoft <g>. They introduced this
nice restrictions <g> Comodo (or other WebTrusts) can't do anything here.
All this stuff is powered by Microsoft Authenticode technology.
> Last time I renewed my 3 year certificate I had to jump through so many
> hoops despite sending them copies of my USA company registration, copy of
> bank statements, proof of identity etc. etc.
>
> Of course my problem is even more difficult as one company I own is
> registered in Florida, the accounts are prepared there but I actually live
> in the UK. But in these days that should not be very unusual!
>
> I accept this information has to be sent but even then they make it so
> difficult.
>
> This is such a large organization that I cannot believe they can make life
> easier to buy something.
>
> Curious and interested.
All WebTrust "agencies" have to follow the very same strict rules. So you
would experience the same problems with other "Certification Authorities".
BTW, two years ago, we had to request a VeriSign certificate (Microsoft
Partner Program). And you know what? VeriSign did not accept our documents
and they did not issue us a certificate. I told them that we are a Comodo
(the world's 2nd largest WebTrust Compliant Certification Authority) Partner
and that we have quite a few customers and that I would make this story
public. They did not care at all <g>. Please note that those companies
sell 500+ certificates PER HOUR! This is a money making machine. You, the
individual, counts nothing. But Comodo is the nicest WebTrust to work with,
believe me! I will never ever in my life do business with VeriSign again.
But of course, they don't lose sleep over it.
Friedrich
-
Re: I give up code signing.
I can back up the Verisign experience as I was part of it
Moreover when I requested the same verisign certificate (for DMC certifications with Microsoft) they refused to sell me one as I was (at that time) considered as an
"individual" and not a registered company
I had to ask a good friend in the USA to do the request for me and beleive me he had to provide a public notary letter to confirm his address and phone number ONLY because
his company was not listed as such in the yellow pages (he was using another name there more user friendly)
Verisign is to be _avoided_
Merci
Cordialement - Best regards
Jean-Pierre GUTSATZ
CGF
DMC - Data Management Center
A tool to let you Migrate Import Export Transfer your Data
www.dmc-fr.com
Certified by Microsoft : "Works with Vista" &
"Works with Windows Server 2008"
-
Re: I give up code signing.
Friedrich,
I know Vista was never supported, but is W7?
--
Regards,
Abe Jimenez
Clarion 7.1.7014 EE Windows 7 Pro 64 Bit
-
Re: I give up code signing.
Abe,
>
> I know Vista was never supported, but is W7?
>
W7 has the very same underlying technology ;-)
Of course, you can use Vista/W7 to order your certificate (the "in the file"
option is not available, only the "in the CSP"). But if you would like to
have it as spc/pvk, then it's complicated. You have to "export" it from the
certificate "pool" to a pfx and then use OpenSSL to convert it.
Friedrich
-
Re: I give up code signing.
BTW, and it can only be exported from the CSP in Vista/W7 if the
"Exportable" option (the default) is marked when you request the
certificate.
Friedrich
-
Re: I give up code signing.
No. But I did hear that gray is an old blond.
Abe Jimenez