SetupBuilder with SSL / Comodo EV Code-Signing Certificates / more...

All,

I'm sorry for the silence. A lot of hard work has been going on
behind-the-scenes.

1. Optional support for SSL (Secure Sockets Layer) from within SetupBuilder
installers is feature complete now. This was a major rewrite in the HTTP
component and parts of the installer engine. SSL ensures that all data
passed between the web server and the SetupBuilder installer remain private
and integral.

On top of this, SetupBuilder introduces additional WUPDATE_SSL.EXE and
WUCHECK_SSL.EXE clients with SSL support.

2. After quite some hours of debugging, I found a long standing bug in the
LSPack engine. That's fixed now.

The new SetupBuilder 2018 is expected to be released in February 2018.

3. There has been quite a bit of development work on Large File Support
(LFS) for Windows. It is not a trivial task to get past the 2GB limit
because we have to convert thousands of internal SetupBuilder functions (in
the compiler, linker, runtime) to 64-bit integer types. We plan to
introduce the new enhanced "LSPackX" technology in Q2 2018.

4. As you probably know, there is a new type of code-signing certificate in
town: the Extended Validation (EV) Code-Signing Certificate. This type of
certificate instantly establishes reputation in Microsoft's SmartScreen
Application Reputation filter in Windows 8/8.1/10 and Internet
Explorer/Edge. The requirement of physical token to sign code prevents
certificate abuse and further improves trust.

The main problem is that a one-year certificate costs $399, two years cost
$698 and three years cost $897. Ouch! After tough negotiations, I believe
we can provide access to highly discounted Comodo EV code-signing
certificates soon.

I hear you ask, what is the difference between EV Code Signing and regular
Code Signing? See attached screenshot.

More information to follow soon!

Friedrich

--
Friedrich Linder
Lindersoft | SetupBuilder | www.lindersoft.com
954.252.3910 (within US) | +1.954.252.3910 (outside US)

--SetupBuilder "point. click. ship"
--Helping You Build Better Installations
--Create Windows 10 ready installations in minutes
--Official COMODO Code Signing and SSL Certificate Partner

Whoa! It all sounds great!

Peter

Friedrich,

> A lot of hard work has been going on behind-the-scenes.

And this is different, how?!<g>


> The main problem is that a one-year certificate costs $399, two years cost
> $698 and three years cost $897. Ouch! After tough negotiations, I believe
> we can provide access to highly discounted Comodo EV code-signing
> certificates soon.

I'll retain the 3 year cheap cert I -JUST- purchased, thank you.<g>


--
Lee White

RPM Report Viewer.: http://www.cwaddons.com/products/rpm/
Report Faxing.....: http://www.cwaddons.com/products/afe/
---Enroll Today---: http://CWaddons.com

Creative Reporting: http://www.CreativeReporting.com

Product Release & Update Notices
http://twitter.com/DeveloperPLUS

Hi Lee,

>And this is different, how?!<g>

Costs more;)

Best regards,

--
Arnor Baldvinsson
Icetips Alta LLC

Nice to hear that, Friedrich!

Especially that snippet about "Extended Validation (EV) Code-Signing Certificates".

Is the advent of the new SB-Version worth to chatter on ClarionLive!?

Looking forward
Wolfgang


Regards,
Wolfgang Orth
www.odata.de

Please note:
From time to time it happens, that I overlook a reply to my postings.
Please don't be angry.
In case of an emergency, try to contact me via mail.

Bitte beachten:
Von Zeit zu Zeit passiert es mir, dass ich Antworten auf meine Postings übersehe.
Bitte nicht böse sein.
Im Notfall bitte Kontakt per Mail versuchen.

Lee,

>> A lot of hard work has been going on behind-the-scenes.
>
> And this is different, how?!<g>

<g> ;-) We are all sitting in the same boat :-)

>> The main problem is that a one-year certificate costs $399, two years
>> cost $698 and three years cost $897. Ouch! After tough negotiations,
>> I believe we can provide access to highly discounted Comodo EV code-
>> signing certificates soon.
>
> I'll retain the 3 year cheap cert I -JUST- purchased, thank you.<g>

<g> More information very soon (pros and cons).

Friedrich

Hey Friedrich,
> 2. After quite some hours of debugging, I found a long standing bug in the
> LSPack engine. That's fixed now.
does it affects also the lspack32.dll/lsunpa32.dll ? I have it in use to
this day..
TIA, Thomas

Hi Thomas,

thanks for the interesting question!

No, this does not affect the LSPACK32.DLL and LSUNPA32.DLL libraries.

We introduced the bug nearly ten (10) years ago when we added the "LSPack 7
for SetupBuilder" compression library to the system. The new library
improved performance on Vista/2008 dramatically by using "LSPack Smart I/O
Buffer Allocation" technology.

Under certain circumstances, a possible silent buffer overrun (in the above
mentioned buffer allocation) resulted in an incorrect output if the
compressed data size was between 65533 and 65535 bytes.

Friedrich

Hi Friedrich,
> We introduced the bug nearly ten (10) years ago when we added the "LSPack 7
> for SetupBuilder" compression library to the system. The new library
> improved performance on Vista/2008 dramatically by using "LSPack Smart I/O
> Buffer Allocation" technology.
Ok, you force me to the next question ;-)
Any chance for getting this dramatically faster 7 thingy also in the
standalone libs ?
Ciao, Thomas