Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [code-signing]

The tag has no usage guidance.

0
votes
0answers
7 views

Unity Keystore Not Accepting Correct Password [migrated]

So I think I might be going insane. I have the keystore for this application I'm planning to update on Google Play that is built in Unity. So I have the keystore and when I load it up in keystore ...
-1
votes
1answer
37 views

Distribution of Code Signing certificate - best practices? [closed]

Distribution of Code Signing certificate - best practices? Note: I'm an absolute newbie when it comes to code signing and software certificates. I've tried to search and read about how to solve our ...
0
votes
0answers
68 views

Signing Apple Wallet Pass OpenSSL

I'm trying to create a pass signing server to dynamically create Apple Wallet passes using OpenSSL and standard pass templates provided by Apple but I can't seem to get the pass to show up using the ...
0
votes
1answer
20 views

Windows 10 Administrator rights needed when dev command prompt is run as administrator

Maybe I work today too long but: What are the additional (another) admin rights? Windows is killing me.
0
votes
0answers
89 views

Whitelisting code signing certificates signed by internal CA in AppLocker

In Windows 10's AppLocker, it is possible to whitelist applications and libraries signed by a given publisher: In our case, we have a number of developers producing libraries and signing them with ...
0
votes
0answers
63 views

How to use PIV smartcards (YubiKey 4) to sign application binaries?

I am about to start using my YubiKey 4 (RSA 2048 bit key) for signing application binaries. There a quite a few tutorials about how to setup this. It seems that most tutorials based on the original ...
0
votes
0answers
31 views

Running unsigned cross-compiled apps on Windows 10

I'm normally Linux developer and started experimenting with cross-compilation for Windows. Good training example is to try to cross compile Bitcoin Core project. My build finished probably ...
2
votes
0answers
698 views

Why Windows Defender SmartScreen does not show publisher name of a signed executable?

I have purchased a Standard Code Signing certificate from Digicert and I do not understand why my executable, although signed with a certificate from a trusted CA is displayed as Unknown Publisher by ...
0
votes
0answers
69 views

Can PHP/Linux perform Microsoft Authenticode code signing?

My organization is currently in the process of obtaining a Microsoft Authenticode and we would like to see if we can integrate it into our current PHP-based deployment process. Can PHP (or a shell ...
0
votes
1answer
587 views

Windows 10 x64 fails to install signed device drivers, although everything is reported to be okay

I am currently struggling with Windows 10 device driver signing, my company has developped some drivers for Windows 10 x86 and x64, which I try to sign using a SHA1 certificate. I know SHA1 is not the ...
0
votes
1answer
177 views

how to timestamp a binary (.jar) after signing

I have a jar which I want to sign and timestamp with timestamping server(tsa). I am using the following command to codesign and timestamp the binary. jarsigner -verbose -keystore macert.p12 -...
4
votes
1answer
791 views

SHA-2 Code Signing questions

First and foremost, this is my very first experience with Code Signing. I bought Standard Code Signing from Certum for 3 years. It is SHA-2 based: Secured by the SHA-2 function They are all ...
1
vote
0answers
271 views

Application suddenly showing as unverified publisher

We have a third party application running on a customer's desktop. A week ago this was running fine, then a 'new license was applied' by the third party support team which 'didn't change anything' ...
1
vote
1answer
4k views

macOS Sierra - error: The specified item could not be found in the keychain - within ssh

When I try to run codesign --force --deep-verify --verbose --sign "CERT-NAME" ... over SSH I always get an error: The specified item could not be found in the keychain. But when I run the same ...
0
votes
1answer
300 views

Why isn't Windows 10 1607 rejecting my driver?

I have built my own version of the OpenVPN TAP driver (NDIS5) and have to package it with my application. From the anniversary update of Windows 10 (1607), Windows is supposed to reject the signature ...
8
votes
1answer
1k views

How do I uninstall an application whose installer has a revoked signing certificate

Several years ago I installed an application called Net Limiter on my then Windows 7, since upgraded to Windows 10, machine. Earlier today I attempted to uninstall it while cleaning up applications ...
3
votes
2answers
63 views

Is there any limitation on the number of applications that can be signed with one certificate?

I bought a code signing certificate (in my name) for windows and I signed 2 apps with it (the 32 bit and 64 bit versions of my app), both apps seems to be signed properly but I don't know if each ...
1
vote
1answer
85 views

How to removed signed trusted app from Mac OSX?

On my Mac OSX machine I ran an app that was correctly signed by my organization, but not downloaded from the app store. Now when I go into Gatekeeper and change the allow apps setting to only the app ...
5
votes
3answers
4k views

Signtool can't do SHA256 signing on Windows 7

I have been using SHA1 signing for many years, but from 2016, Windows is forcing developers to use SHA256. Windows Enforcement of Authenticode Code Signing and Timestamping By using Windows 7 SDK ...
1
vote
0answers
39 views

OS X Gatekeeper bypassed when application is owned by root

I understood that the purpose of OS X Gatekeeper was to block software without proper code signing. However, changing applications to be owned by root overrides this behavior. Enable Gatekeeper and ...
1
vote
1answer
228 views

How to unsign an application?

In Windows 10 it is possible to run unsigned applications but it is not possible to run signed applications where the signature has expired. Is there any way to rip the signature out of an ...
2
votes
1answer
2k views

How can we add imported Developer certificates in Mac can be added to key chain

I googled a lot for this solution, but couldn't find a proper one. when i try to add imported certificate in key chain by using following sudo security add-trusted-cert -d -r trustRoot -k “/Library/...
2
votes
3answers
18k views

How to get ExpressCard 34 USB3 working on Apple Mac OS X 10.10 / 10.11 + (via 1 or more of: kexts,signing or choosing compatible models/chipsets)?

Note that I want to try this manual approach first before using MultiBeast. Failed to do the driver install—failure message on screen—when I last tried last week or any other automated tool. I want ...
0
votes
1answer
81 views

Is it possible to get someone's code signing certificate revoked?

I recently had to clean up someone's computer because they were tricked into installing a bunch of things without their knowledge. The horrible thing about it was that the installer was signed with a ...
2
votes
1answer
414 views

Create self signed certificate for internal application

We have an internal developed VSTO application as a Word Add-in and I need to deliver silently to a Windows 7 SOE. The domain is 2008 R2 based. However, when I script the installer, it comes up with "...
1
vote
1answer
768 views

How to determine if an application is signed with an extended validation (EV) code signing certificate

I know it is possible to view an application digital certificate by right-click->properties->digital signatures, but I cannot tell whether an application is signed with an EV or a regular code signing ...
0
votes
0answers
711 views

How to restart Windows 8 directly to Startup Settings menu?

I need to restart Windows 8 with no driver signature check mode. I use shutdown -o -r command, then I need click Troubleshoot, then Advanced Options, then Windows Startup Setting, then Restart and ...
0
votes
1answer
3k views

Microsoft signed driver appears as publisher not verfied

Task at hand: Microsoft sign drivers on Win 7. I microsoft signed my driver package 3 times every time thinking I might have missed a step or something. However, I cannot seem to get rid of the ...
8
votes
3answers
17k views

How to sign a Windows batch (.bat) file?

I'm running Windows 7 and when I try to run a batch file, it says, "The publisher could not be verified. Are you sure you want to run this software?" So when I try to sign it with my code signing ...
1
vote
1answer
1k views

Digitally Signing Software - self signing cerificate

I'd like to experiment with signing a software executable. I am afraid that there is something that escapes me. I will get to the point where I will acquire a certificate from a CA, but before then I ...
0
votes
2answers
39 views

How to confirm that two files were signed by the same company?

I have two files in Windows XP. Both have a "Digital Signatures" tab. How can I confirm that they were both signed by the same company? I do not want to do this programatically, but by using the ...
1
vote
1answer
1k views

Constantly having to restart Windows 7 to time-stamp installer… Why?

I am using a Windows 7 (64-bit) machine as a build server and have encountered a strange problem. One of my build steps is to apply a code signing certificate using a command like this: signtool ...
5
votes
2answers
3k views

What is the effect of dlls not being signed

On running SigCheck on my Windows box, I noticed quite a few dlls that are unsigned. For eg: c:\windows\system32\amdocl64.dll: Verified: Unsigned File date: 10:47 AM 9/14/...
1
vote
1answer
309 views

Do code-signed executables (signtool.exe) run properly on Windows 98?

Unfortunately I don't have a Windows 98 machine to test this out on. Does anyone know if executables code-signed with SignTool.exe (on Windows 7) will run properly on Windows 98?
1
vote
2answers
6k views

How to install authrootstl.cab offline?

When I try to install the authrootstl.cab offline it won't work. The certificates are installed but Windows doesn't trust the file, and will continue to try to download it. It says the list signing ...
23
votes
2answers
62k views

What are the Windows system certificate stores?

When adding certificates, stls, ctls and crls to the system, I can choose the certificate store. I have found only references to the "my" and "root" stores so far. Are there any other?
0
votes
1answer
2k views

How to make windows stop from trying to download authrootstl.cab?

Every time I start a specific signed app, Windows 7 tries to download the following file http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab And this trial ...
0
votes
2answers
12k views

How to download and install an updated Certificate Revocation List?

I don't want that my Windows 7 machine download CRLs at boot time. Can I do it manually?
3
votes
4answers
8k views

PowerShell access denied to cert:\CurrentUser\My

PS cert:\currentuser\my> dir Get-ChildItem : Access is denied. At line:1 char:3 + dir <<<< I cannot access any of my code signing certificates to sign a PowerShell script. I can open ...
2
votes
3answers
7k views

I can not install com0com, a digitally signed driver is required

I tried to install com0com - a null modem emulator - on Windows Vista, but failed because Windows Vista doesn't let me install a driver that is not digitally signed. I followed these instructions ...
5
votes
1answer
14k views

Windows cannot verify the digital signature for the drivers required for this device

I run Windows 7 64-Bit and I have a USB Device with a 64-Bit Driver, but no signature. It has a device manager entry with a yellow exclamation mark and this warning: Windows cannot verify the ...
15
votes
3answers
22k views

How to sign a PowerShell script easily?

I'd prefer using the AllSigned execution policy with PowerShell, but self-signing my scripts seems to require several hundreds of megabytes of downloading and installation and the signing process ...
2
votes
2answers
5k views

Standalone code signing tool for .exe files [closed]

I want to sign .exe files I produce. I already have code signing certificate, only last missing step is 'signtool.exe' (or any other tool that works and is free, preferrably command line so that it ...
11
votes
5answers
8k views

If Mac code signing is tampered with, what might fail?

What annoyances or real problems may occur when the digital signature of a Mac application is broken? Applications on a Mac can be digitally signed. When the signature is somehow broken, I know a few ...