Skip to main content

Questions tagged [code-signing]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
90 views

Manually created MacOS apps being deleted

I have some standalone apps that I manually created on my macOS. They keep getting deleted from the Applications folder from time to time, not sure how or why. The source app I use to create them, in ...
fabiosolive's user avatar
0 votes
1 answer
113 views

Does an Extended Validation (EV) Code Signing Certificate protect the downloader if the installer is compromised

A friend of mine has some software available on his website and the installer for it has been infected with some malware. The infection happened on the hosted server without my friend knowing. ...
Rob's user avatar
  • 101
0 votes
2 answers
684 views

Smartscreen blocking even downloads signed with EV certificate

In order to avoid SmartScreen blocking downloads and install files from my application, i bought an EV Code Signing Certificate ,which is expensive. Now when i sign my installation file, Smartscreen ...
delphirules's user avatar
1 vote
1 answer
302 views

How to have an app be trusted by Windows to bypass the "Ransomeware protection"?

I have a Windows desktop software that needs to write new folder/files into the %USERPROFILE%\Documents\ folder. There is a Windows option, under "Ransomware protection", that protects "...
cinico's user avatar
  • 249
0 votes
0 answers
118 views

Code signing certificates

We recently launched a software application built using electron where the app does check a firebase database upon launch of the app and for some reason, it was triggering the Norton Antivirus ...
Len Morales Jr's user avatar
0 votes
1 answer
688 views

How can I generate self-signed certificate with these standards?

I tried creating a certificate using this command: New-SelfSignedCertificate -DnsName "WDACSigning" -CertStoreLocation Cert:\CurrentUser\My\ -Type Codesigning but it causes boot failures ...
user avatar
2 votes
0 answers
27 views

Digital Signature for project

i want to know for me to sign digitally software(i am not a developer just an investor) Do i need to use services like comodo or it can be done manually, for example i freelance soft like desktop app ...
kodomination's user avatar
0 votes
0 answers
213 views

What is the most efficient way to get new executables whitelisted at the big antivirus companies?

The problem explained We developed an application (see https://embeetle.com). To avoid false positives, all our executables and dll's are code-signed with an Extended Verification Code Signing ...
K.Mulier's user avatar
  • 190
-1 votes
1 answer
422 views

Block drivers signed by specific code signing certificate

I have quite an unusual problem. I like to have everything on my PC containerized and therefore I run type 1 hypervisor like KVM (Proxmox) or VMware ESXi on my computers. The issue I am trying to ...
Samuel Tulach's user avatar
0 votes
1 answer
974 views

How do you know if a code signing certificate for a file is ok?

Which things should you look out for, to indicate all looks okay, when viewing a downloaded file's "Digital Signatures" tab in Windows 10? What are the signs there may be an issue with the ...
Eric's user avatar
  • 87
0 votes
1 answer
1k views

For Cybersecurity Newbies: How do I download the .asc file to verify a detached signature with Kleopatra

I am new in the world of cybersecurity, and I am attempting to install Nmap and Zenmap. Before I open the executable file to install Nmap, I want to verify the detached PGP signature through Kleopatra....
SeraphsWrath's user avatar
1 vote
0 answers
710 views

How to setup a code signing certificate to use it with SignTool.exe and /a option?

I just reinstalled my development and publishing environment on a new system. On my previous system, I was able to sign code with my certificate using the signtool.exe command and the "/a" ...
JnLlnd's user avatar
  • 13
2 votes
1 answer
250 views

Do I need to code sign my executables to add my application to WinGet?

The WinGet spec lists the Minimal singleton YAML file example (which I will display below as of 6/17/2021) shows a SignatureSha256 value, which I think signifies that the executables must be signed... ...
Alice's user avatar
  • 121
1 vote
0 answers
226 views

Code Signature Invalid with SIP enabled in macOS Big Sur

I'm trying to install some app on macOS Big Sur 11.3, which requires disabling SIP to authorize the application from settings > security & privacy. Problem is: the app is installed and works ...
watch-this's user avatar
0 votes
0 answers
590 views

Get hash after decrypt (code) signature with the public key

I am new to code signing. After signing my message I get a public key and pkcs7 certificate. I am trying to manually compare the hash of my massage with the hash I get after decrypting the signature ...
Alexandra's user avatar
0 votes
0 answers
51 views

OV code signing certificate provider without personal address on certificate?

Which CA can provide me with personal (OV) code signing certificate that will not include my address? Some include only city but not everyone lives in a big city to feel comfortable with that. ...
miran80's user avatar
  • 237
24 votes
2 answers
27k views

How to revoke a GPG Key and upload in GPG server?

I have create GPG Keys for code signing and created a revocation certificate also. As far as I know, if key is compromised then i can revoke the key using revocation certificate. Can someone suggest ...
Karma Yogi's user avatar
4 votes
2 answers
4k views

How to store GPG keys in TPM

Am working on GPG mechanism to code sign my debian packages. I have generated both Master Key pair and Subordinate Key pairs to sign my packages. Now i want to store my key-pair in TPM hardware ...
Karma Yogi's user avatar
0 votes
0 answers
57 views

Executable file not opening after signing

I built my EXE yesterday. When the EXE file is unsigned, it works normally. When I signs my file with DigiCert code signing certificate, after I sign my file, I opens it, it does not open anymore.
Wolf20482's user avatar
  • 149
8 votes
1 answer
8k views

How to codesign gdb on OS X Mojave?

After installing gdb from homebrew (via $ brew install gdb), I followed these instructions to give gdb permissions to attach to a process. When I got to the step that runs the command: $ codesign --...
camercu's user avatar
  • 451
0 votes
1 answer
99 views

Convert authenticode to kernel-mode certificate

another new question. I have an Authenticode certificate and a driver. That driver is a kernel-mode driver, so I need to sign it using kernel-mode code signing. But my certificate is normal code ...
Wolf20482's user avatar
  • 149
2 votes
1 answer
14k views

How to manually sign Kali for UEFI

I have a laptop running Win10Pro and has UEFI. I have a USB stick with Kali on it. If I disable Secure Boot, I can boot from Kali with no problem, but then Win10/BitLocker complains. Naturally, I ...
iAdjunct's user avatar
  • 1,672
1 vote
2 answers
4k views

Windows 10 Driver(without hardware device) with Error 39, 0xc0000603, Certificate Revoked

Well, the driver was signed by EV Signing Certificate and Microsoft Windows Hardware Compatibility Publisher(WHLK\WHQL) With Secure Boot on Win 10 machine, I got the error code 39(Windows cannot ...
Jack Martin's user avatar
-1 votes
1 answer
503 views

Distribution of Code Signing certificate - best practices? [closed]

Distribution of Code Signing certificate - best practices? Note: I'm an absolute newbie when it comes to code signing and software certificates. I've tried to search and read about how to solve our ...
fsteff's user avatar
  • 169
2 votes
1 answer
2k views

Signing Apple Wallet Pass OpenSSL

I'm trying to create a pass signing server to dynamically create Apple Wallet passes using OpenSSL and standard pass templates provided by Apple but I can't seem to get the pass to show up using the ...
loganb's user avatar
  • 21
1 vote
1 answer
244 views

Windows 10 Administrator rights needed when dev command prompt is run as administrator

Maybe I work today too long but: What are the additional (another) admin rights? Windows is killing me.
0___________'s user avatar
4 votes
1 answer
913 views

How to use PIV smartcards (YubiKey 4) to sign application binaries?

I am about to start using my YubiKey 4 (RSA 2048 bit key) for signing application binaries. There a quite a few tutorials about how to setup this. It seems that most tutorials based on the original ...
burnersk's user avatar
  • 446
2 votes
0 answers
2k views

Why Windows Defender SmartScreen does not show publisher name of a signed executable?

I have purchased a Standard Code Signing certificate from Digicert and I do not understand why my executable, although signed with a certificate from a trusted CA is displayed as Unknown Publisher by ...
jtraulle's user avatar
1 vote
1 answer
159 views

Can PHP/Linux perform Microsoft Authenticode code signing?

My organization is currently in the process of obtaining a Microsoft Authenticode and we would like to see if we can integrate it into our current PHP-based deployment process. Can PHP (or a shell ...
Judge2020's user avatar
  • 167
1 vote
1 answer
2k views

Windows 10 x64 fails to install signed device drivers, although everything is reported to be okay

I am currently struggling with Windows 10 device driver signing, my company has developped some drivers for Windows 10 x86 and x64, which I try to sign using a SHA1 certificate. I know SHA1 is not the ...
Erik's user avatar
  • 1,397
0 votes
1 answer
499 views

how to timestamp a binary (.jar) after signing

I have a jar which I want to sign and timestamp with timestamping server(tsa). I am using the following command to codesign and timestamp the binary. jarsigner -verbose -keystore macert.p12 -...
VikasPushkar's user avatar
3 votes
1 answer
1k views

SHA-2 Code Signing questions

First and foremost, this is my very first experience with Code Signing. I bought Standard Code Signing from Certum for 3 years. It is SHA-2 based: Secured by the SHA-2 function They are all ...
Vlastimil Burián's user avatar
1 vote
0 answers
493 views

Application suddenly showing as unverified publisher

We have a third party application running on a customer's desktop. A week ago this was running fine, then a 'new license was applied' by the third party support team which 'didn't change anything' ...
Patrick's user avatar
  • 1,538
1 vote
1 answer
8k views

macOS Sierra - error: The specified item could not be found in the keychain - within ssh

When I try to run codesign --force --deep-verify --verbose --sign "CERT-NAME" ... over SSH I always get an error: The specified item could not be found in the keychain. But when I run the same ...
TOho's user avatar
  • 113
1 vote
1 answer
388 views

Why isn't Windows 10 1607 rejecting my driver?

I have built my own version of the OpenVPN TAP driver (NDIS5) and have to package it with my application. From the anniversary update of Windows 10 (1607), Windows is supposed to reject the signature ...
Avram's user avatar
  • 21
8 votes
1 answer
3k views

How do I uninstall an application whose installer has a revoked signing certificate

Several years ago I installed an application called Net Limiter on my then Windows 7, since upgraded to Windows 10, machine. Earlier today I attempted to uninstall it while cleaning up applications ...
Dan Is Fiddling By Firelight's user avatar
4 votes
2 answers
891 views

Is there any limitation on the number of applications that can be signed with one certificate?

I bought a code signing certificate (in my name) for windows and I signed 2 apps with it (the 32 bit and 64 bit versions of my app), both apps seems to be signed properly but I don't know if each ...
ePezhman's user avatar
  • 273
1 vote
1 answer
585 views

How to removed signed trusted app from Mac OSX?

On my Mac OSX machine I ran an app that was correctly signed by my organization, but not downloaded from the app store. Now when I go into Gatekeeper and change the allow apps setting to only the app ...
user1574808's user avatar
6 votes
4 answers
7k views

Signtool can't do SHA256 signing on Windows 7

I have been using SHA1 signing for many years, but from 2016, Windows is forcing developers to use SHA256. Windows Enforcement of Authenticode Code Signing and Timestamping By using Windows 7 SDK ...
Frank Jelstrup's user avatar
1 vote
0 answers
57 views

OS X Gatekeeper bypassed when application is owned by root

I understood that the purpose of OS X Gatekeeper was to block software without proper code signing. However, changing applications to be owned by root overrides this behavior. Enable Gatekeeper and ...
gnucchi's user avatar
  • 981
1 vote
1 answer
614 views

How to unsign an application?

In Windows 10 it is possible to run unsigned applications but it is not possible to run signed applications where the signature has expired. Is there any way to rip the signature out of an ...
Owyn's user avatar
  • 113
3 votes
1 answer
3k views

How can we add imported Developer certificates in Mac can be added to key chain

I googled a lot for this solution, but couldn't find a proper one. when i try to add imported certificate in key chain by using following sudo security add-trusted-cert -d -r trustRoot -k “/Library/...
MacDeveloper's user avatar
2 votes
3 answers
21k views

How to get ExpressCard 34 USB3 working on Apple Mac OS X 10.10 / 10.11 + (via 1 or more of: kexts,signing or choosing compatible models/chipsets)?

Note that I want to try this manual approach first before using MultiBeast. Failed to do the driver install—failure message on screen—when I last tried last week or any other automated tool. I want ...
therobyouknow's user avatar
0 votes
1 answer
110 views

Is it possible to get someone's code signing certificate revoked?

I recently had to clean up someone's computer because they were tricked into installing a bunch of things without their knowledge. The horrible thing about it was that the installer was signed with a ...
user avatar
2 votes
1 answer
2k views

Create self signed certificate for internal application

We have an internal developed VSTO application as a Word Add-in and I need to deliver silently to a Windows 7 SOE. The domain is 2008 R2 based. However, when I script the installer, it comes up with "...
user334981's user avatar
2 votes
1 answer
1k views

How to determine if an application is signed with an extended validation (EV) code signing certificate

I know it is possible to view an application digital certificate by right-click->properties->digital signatures, but I cannot tell whether an application is signed with an EV or a regular code signing ...
jiboutin's user avatar
0 votes
0 answers
722 views

How to restart Windows 8 directly to Startup Settings menu?

I need to restart Windows 8 with no driver signature check mode. I use shutdown -o -r command, then I need click Troubleshoot, then Advanced Options, then Windows Startup Setting, then Restart and ...
Ivan's user avatar
  • 1
1 vote
1 answer
4k views

Microsoft signed driver appears as publisher not verfied

Task at hand: Microsoft sign drivers on Win 7. I microsoft signed my driver package 3 times every time thinking I might have missed a step or something. However, I cannot seem to get rid of the ...
Priyanka Gupta's user avatar
10 votes
4 answers
35k views

How to sign a Windows batch (.bat) file?

I'm running Windows 7 and when I try to run a batch file, it says, "The publisher could not be verified. Are you sure you want to run this software?" So when I try to sign it with my code ...
user avatar
1 vote
1 answer
2k views

Digitally Signing Software - self signing cerificate

I'd like to experiment with signing a software executable. I am afraid that there is something that escapes me. I will get to the point where I will acquire a certificate from a CA, but before then I ...
Thalia's user avatar
  • 658