The tag has no usage guidance.

learn more… | top users | synonyms

24
votes
3answers
4k views

Is it possible to sign a file using an ssh key?

I use SSH (OpenSSH 5.5p1 on Linux, to be precise). I have a key, on which i have a passphrase. I use this for the usual logging in to computers stuff. Can i also use it to sign files? As i ...
8
votes
2answers
4k views

GPG - verifying signatures without creating trust chain?

Is it possible to ask gpg (or gpg4win) to just verify whether a file was signed by a particular public key file, without having to import and sign and trust that key? i.e. something like gpg ...
8
votes
4answers
2k views

Is there a free PDF printer / distiller that creates signable documents?

I've used various methods (mentioned elsewhere on this site) to create PDFs, using a printer driver or converting from PostScript, etc. The common problem is that if I open any of the output files in ...
6
votes
3answers
6k views

Where to find the latest digitally signed Synaptics touchpad driver?

In the past, Synaptics provided their touchpad drivers in a digitally-signed self-extracting executable. For example, here is an older version of the driver hosted on the official Synaptics website, ...
6
votes
2answers
4k views

Trusted email: Digital signature with Gmail (IE)

There are places in the internet, where you can get a free digital signature for email. How can I use it with Gmail and Internet Explorer?
6
votes
1answer
12k views

How to sign gmail email with digital signature?

I have my personal digital signature on the special card and the according reader. How can I sign an email (sending it with gmail) with this signature? I am on the latest OSX and use Google Chrome ...
6
votes
2answers
2k views

How can I digitally sign a PDF document quickly and cheaply?

I need to digital sign a PDF document. However, Acrobat reader does not let me sign documents. I just need to sign the document, not edit it. Do I need to buy the full Acrobat software? Or is there ...
5
votes
3answers
4k views

Is it possible to sign archives?

I played with openssl to make a pub/prv key and create a signature of a file and validated it. I toyed with Cryptophane (windows gnupg frontend) and heard about keyservers+played with signing text. I ...
5
votes
2answers
3k views

Need a solution to verifying expired digital signatures

I use digital signatures for signing my invoices (required by law for digital invoicing in my country). The problem is, my local authority issues signing certificates that are only valid for a year ...
5
votes
2answers
18k views

How to install unsigned drivers on Windows 7?

I'm trying to install FreeOTFE on 64bit Windows 7. FreeOTFE comes with many drivers for various encryption algorithms, that need to be installed. Windows gives me the error, that since those aren't ...
5
votes
1answer
8k views

Windows 7 claims driver is not digitally signed, but it is

On this system the WLAN AutoConfig service will not start: In error log/system: "The WLAN AutoConfig service depends on the NativeWiFi Filter service which failed to start because of the following ...
5
votes
5answers
5k views

GnuPG Command Line - Verifying KeePass Signature

I'm trying to verify the PGP Signature of the latest version of KeePass 2.14's setup file against this signature, but this is the output I receive: C:\Program Files (x86)\GNU\GnuPG>gpg.exe ...
4
votes
1answer
1k views

How do I digitally sign a 64-bit kernel mode driver?

I have a kernel mode driver and I have to install it on 64 bit win 7. It needs to be digitally signed. I digitally signed it using the dseo13b.exe. But when I load the driver I get error in the system ...
4
votes
1answer
2k views

Microsoft Word and digital signatures using PGP?

I have a document for a project that I am working on with my team, and I need to digitally sign the document in a way that can be verified by other members of the team. The catch is, internally, we ...
4
votes
1answer
407 views

How to make computer (or user) trust signed software

I have an application, which I sign and timestamp using a code-signing certificate issued by thawte, with intermediate authority Thawte code signing CA - G2. The signature is OK (as it shows in file ...
3
votes
1answer
102 views

How to merge several detached signatures from different people into one?

A group of people wants to publish a file and they all want to digitally sign the file as different recipients of the file will have different chains of trust. For simplicity, it's desired that there ...
3
votes
1answer
140 views

Can signature verification expose a rootkit?

I know that rootkits operate as part of the kernel, driver or service running on the system, injecting themself into DLLs or installing as a legitimate applications. If I were to scan the system with ...
3
votes
1answer
83 views

Git can't invoke gpg-agent to sign commits

I have Git 2.8.1 running in Ubuntu 15.10, and I've set it up to GPG sign all of my commits using my keybase key. It used to work well. At one point, I'm not sure what caused it, I started getting ...
3
votes
1answer
566 views

gpg: Can't check signature (FreeBSD)

I follow this SA https://www.freebsd.org/security/advisories/FreeBSD-SA-14:18.openssl.asc [FreeBSD 10.0] <= My FreeBSD version fetch <link>/openssl-10.0.patch fetch ...
3
votes
2answers
806 views

Does Windows actually verify digital signatures in the Properties dialog?

When downloading executables from the Internet, I always check to see if they are digitally signed before I feel safe running them. In Windows, when right-clicking a digitally-signed file and ...
3
votes
2answers
304 views

Signtool can't do SHA256 signing on Windows 7

I have been using SHA1 signing for many years, but from 2016, Windows is forcing developers to use SHA256. Windows Enforcement of Authenticode Code Signing and Timestamping By using Windows 7 SDK ...
3
votes
1answer
1k views

Preventing PDF document from having a digital signature added with long term signature validation?

I'm running into a new issue with PDF file sizes. It seems that Acrobat X and above now have by default enabled a preference called "Include Signature’s Revocation Status When Signing". Essentially ...
3
votes
1answer
901 views

Embed a GPG Signature in a PDF File

Is it possible to embed GPG signatures in PDF files the way it can be done with X.509 signatures? (I've been using JSignPDF to sign my invoices so far, but now the law has relaxed a bit, and it ...
2
votes
1answer
109 views

How can an unsigned driver affect the Windows OS?

There are lot of signed drivers (signed by Microsoft) that don't affect the Windows OS. If an unsigned driver is installed in a Windows machinehow can it affect the stability of the operating system, ...
2
votes
1answer
3k views

Relation between .p7b and .spc digital certificate files

My company have just renewed their digital certificate from Thawte. The previous certificate I was using had an 'spc' extension. The new certificate I've been handed ends in a 'p7b'. Although I can ...
2
votes
2answers
52 views

Why is package/code signing considered more secure, and how does it work?

Kind of a noob question, but I've been reading about signing and how it makes linux distros more secure. Docker recently added image signing, which seems cool. Why is this so important? Just because I ...
2
votes
1answer
113 views

How much information is included with a GPG signature?

Let's say you verify someone's signature with GPG: $ gpg --decrypt statement.txt.sig "I am not a crook." gpg: Signature made 17 Nov 1973 9:31:50 AM CDT using RSA key ID 92861D99 gpg: Good signature ...
2
votes
1answer
788 views

Does software for Windows 8 on Surface always have to be signed? [duplicate]

Possible Duplicate: Install a Windows 8 Modern UI app without the Windows Store We want to program for Windows 8 for Surface and have problems signing the software before installing for ...
2
votes
1answer
341 views

Windows certificate valid even after expired

I have a signed executable. The certificate for that signature says it is usable until 2007, still Windows (7 Professional) says it is valid if I'm opening it via properties dialog. How is that ...
2
votes
1answer
359 views

Does a certificate authority (CA) have to be online constantly?

Does a CA has to be online all the time in order for the whole system to work? For example, if I go to a secure webpage that uses a certificate signed by a CA, I receive a public key along with the ...
2
votes
1answer
663 views

Digital Certificate (Signature) Verification in Software Installation

I need to know what exactly happens during digital certificate (signature) verification when a software is installed by the operating system. I understand that this is a asymmetric key process and I ...
2
votes
1answer
3k views

What are the risks to disabling driver signature enforcement in Win 8?

In order to use the communication software for Arduino in Windows 8 I'm forced to permanently disable driver signature enforcement. I did this for sometime with windows 7 without contracting a virus ...
2
votes
1answer
191 views

Can I use GnuPG to verify that a file is unmodified and comes from the correct sender?

Can I use GnuPG to verify that a file is unmodified and comes from the correct sender? Let's take a simple use case: I have this file with some important content, let's say it is in a .tar.gz file. ...
2
votes
1answer
219 views

Hardware digital signature

Is it possible to show how generate a digital signature, a checksum, or something along those lines based on your computer hardware using an Ubuntu Live CD? So, once the first digital signature is ...
2
votes
1answer
23 views

What is the minimum amount of data I need to sign a file?

Let's say I have a multi-gigabyte file on a work computer, and (2) I have my private GnuPG key on my home computer. I want to sign the really big file with my private key. I trust my home computer ...
2
votes
2answers
26 views

Signed application fails to launch

On a particular Windows Vista PC, all programs signed with a particular certificate fail to launch from explorer, when it verifies the publisher. Only for a second or two, the hour glass is visible, ...
2
votes
1answer
71 views

Hang when launching digitally signed executable

We have a weird problem on 2 PCs with running a digitally signed 120 Mb executable. If user launches a digitally signed .exe - then the launching host (e.g. Explorer or cmd.exe) will enter infinite ...
2
votes
1answer
3k views

Export Microsoft Word document for Adobe Acrobat signature

When I save a MS Word document (.docx) as a PDF, I am not able to sign it in Adobe Acrobat. Is there a way to export an MS Word doc to a signable PDF? Third party products are an option as well.
2
votes
1answer
386 views

Delete the digital signature from a received Outlook message

My goal is to delete the digital signature in an Outlook message. My initial idea was to create a VBA script (which I have done below) to enumerate all attachments in the selected mail item and ...
2
votes
2answers
4k views

How do I disable digital signature checking for Windows 8.1 EFI files?

I'm trying to patch my bootmgfw.efi file to change the background color of the BitLocker password prompt and other Windows bootup screens. I found the values to search for and replace for the color ...
2
votes
0answers
273 views

How can I sign an MS Word macro with a digital certificate from the local machine certificate store?

I am trying to find out how I can digitally sign a Microsoft Word macro using a valid 3rd party CA issued VBA code-signing certificate that is installed into the machine rather than the user ...
2
votes
0answers
1k views

Okular: how to sign a pdf?

How do I sign a PDF in Okular? I tried searching for about 20 mins, but I can't find any answers... I have a .png of my signature, and I basically want to insert it into the document on the dotted ...
2
votes
1answer
106 views

Can I sign my emails with both S/MIME and PGP/GPG?

And if it possible, is there any benefit from doing so in one order or the other? signWithSMIME(signWithPGP(message)) versus signWithPGP(signWithSMIME(message)) Also, are there any reason not to ...
2
votes
0answers
50 views

Why do large organisations still not sign various EXEs? [closed]

We run a controlled Windows 7 environment and have several applications that are digitally signed by the publisher that run under user context fine. However, even now we still get vendors large and ...
2
votes
0answers
71 views

Adobe Pro 9 form not digatally signable in Adobe Reader x

I created a form in Adobe Pro 9 with a digital signature block. When a Adobe Reader X user tries to sign document it does nothing? How do I correct without upgrading to Adobe Pro X?
2
votes
1answer
156 views

What source document format can be exported to PDF and generate digital signature fields?

My team wants to send out to 3rd parties a contract in PDF format, with digital signature fields that could be signed using Adobe Reader. Every time we add a new 3rd party to the contract, we are ...
2
votes
0answers
479 views

Outlook sends mail twice in a row

I have a problem with Outlook 2010. When I try to send a mail with digital signature, Outlook sends the mail twice in a row. Both mails look identical and both have the smime.p7s attachment. When I ...
1
vote
1answer
2k views

How does gpg handle multiple keys in a keypair?

As I understand it, keypairs used with gpg generally have more than one associated key: one for signing and one for encryption. How are these multiple keys managed when using gpg (to push to a ...
1
vote
1answer
659 views

Sign & Encrypt vs. Encrypt & Sign - What does GPG do?

I’ve already read the discussion Should we sign-then-encrypt, or encrypt-then-sign? and the paper Defective Sign & Encrypt in S/MIME, PKCS#7, MOSS, PEM, PGP, and XML. My question has to do with ...
1
vote
2answers
7k views

VirtualBox fails to start on Windows Server 2003

For reasons I cannot disclose, I need to install a Linux server within a VirtualBox host running in Windows Server 2003. Unfortunately, VirtualBox fails to start, giving me an error that seems to ...