Skip to main content
14 votes
Accepted

How to codesign gdb on OS X Mojave?

I found that if I first followed these instructions to create the certificate BEFORE attempting to complete the gdb signing instructions, I was able to get it to work. The only exception is that I had ...
camercu's user avatar
  • 451
10 votes

How to revoke a GPG Key and upload in GPG server?

As far as I know, if key is compromised then i can revoke the key using revocation certificate. Yes, but as long as you have the actual private key (f it's compromised but not destroyed), you can ...
grawity_u1686's user avatar
7 votes
Accepted

SHA-2 Code Signing questions

Bearing in mind the certificate has been issued 10. 10. 2016, i.e. after 1. 1. 2016, does this somehow influence how the signature will behave? I ask this on behalf of reading about deprecation of SHA-...
grawity_u1686's user avatar
6 votes
Accepted

How to use PIV smartcards (YubiKey 4) to sign application binaries?

The YubiKey tools do not enforce any kind of restrictions or limitations on the keys or certificates in particular slots. Some third-party tools do. The largest difference between the various ...
Kate Gray's user avatar
5 votes

How do I uninstall an application whose installer has a revoked signing certificate

You can use the signtool program to strip its digital signatures. That tool comes with the Windows SDK, or with Visual Studio, though you might have to adjust some settings first. It only appears on ...
Ben N's user avatar
  • 41.2k
4 votes
Accepted

Signtool can't do SHA256 signing on Windows 7

I finally found a solution for double-signing files in Windows 7. The trick is to use the Window 8 SDK (not 8.1 or 10)! I used this download: https://developer.microsoft.com/windows/downloads/windows-...
CodeX's user avatar
  • 256
3 votes
Accepted

Smartscreen blocking even downloads signed with EV certificate

In order to avoid SmartScreen blocking downloads and install files from my application, i bought an EV Code Signing Certificate ,which is expensive. Now when i sign my installation file, Smartscreen ...
Ramhound's user avatar
  • 43k
3 votes

Smartscreen blocking even downloads signed with EV certificate

You can try making a self-extracting Zip archive (executable, .exe) with 7-Zip or other tool and then using the MS SignTool, digitally sign the file, verifying the signature. A self-extracting ...
DrMoishe Pippik's user avatar
2 votes
Accepted

Convert authenticode to kernel-mode certificate

The distinguishing feature of "kernel-mode code signing" certificates is the 2.23.140.1.4.1 policy OID listed under "Certificate policies". Because this is part of the certificate's (meta)data, and ...
grawity_u1686's user avatar
2 votes

How to store GPG keys in TPM

GPG, as of version 2.3, has native support for TPMs, see Using a TPM with GnuPG 2.3 This is handled in gpg-agent via an external program called tpm2daemon. On OpenSuse, the package to install is ...
Martin Monperrus's user avatar
2 votes

Signtool can't do SHA256 signing on Windows 7

The issue is actually way simpler. The problem is with the time stamp server. Instead of using signtool.exe with this /t http://timestamp.comodoca.com You need to use it like this for SHA1 /tr ...
Daniel Georgiev's user avatar
2 votes

How can I generate self-signed certificate with these standards?

Self-signed certificates use UTF-8. What you need is Printable_String. Certificates created by an Enterprise CA role in Windows Server with code signing certificate template, use those specifications. ...
SpyNet's user avatar
  • 191
2 votes

Signing Apple Wallet Pass OpenSSL

This is a delayed reply, but I hit a similar thing today, while also using that same guide: Beginning Passbook in iOS 6: Part 1/2. It turns out, as old as it is, it still works. Here is some ...
naartjie's user avatar
  • 129
1 vote

Windows 10 Administrator rights needed when dev command prompt is run as administrator

What are the additional Administrator rights? You need to give your user account access to the key container located at C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys In case you reset your key ...
Ramhound's user avatar
  • 43k
1 vote

Block drivers signed by specific code signing certificate

Anyway as it was mentioned in the comments, there is a list of untrusted certificates in the certmgr utility. Going into the file properties -> certificate details -> view certificate -> ...
Samuel Tulach's user avatar
1 vote
Accepted

How do you know if a code signing certificate for a file is ok?

To answer the main question, select each signature in the Signature list of the Digital Signatures tab, then press Details. If you see This digital signature is OK listed at the top of the General ...
leeharvey1's user avatar
1 vote

How to store GPG keys in TPM

For GnuPG 2.x, you would need: Either native TPM2 support in gpg's scdaemon program (the smartcard handler component), or a replacement scdaemon program which uses TPM2, or a replacement scdaemon ...
grawity_u1686's user avatar
1 vote

How to manually sign Kali for UEFI

The easiest is to use Linux Foundation signed PreLoader which works on file hash basis and does not require any configuration, but it will require manual intervention every time you update the kernel. ...
ValdikSS's user avatar
  • 224
1 vote
Accepted

Windows 10 Driver(without hardware device) with Error 39, 0xc0000603, Certificate Revoked

According to the screenshot in the comments, your driver was submitted for WHQL test signing. The problem is likely that your system you are installing on is not properly configured for test signed ...
user71659's user avatar
  • 418
1 vote

Windows 10 x64 fails to install signed device drivers, although everything is reported to be okay

I know SHA1 is not the best option, but should still work as far as I understand the technical documentation from Microsoft. The problem is that the current build of Windows 10 does not trust SHA1 ...
Ramhound's user avatar
  • 43k
1 vote

Why isn't Windows 10 1607 rejecting my driver?

I figured it out. There's an exception for drivers signed with a Cross Signing Cert that was issued before July 29th 2015. Although my EV cert is brand new, the cross signing cert comes from the root ...
Avram's user avatar
  • 21
1 vote
Accepted

Is there any limitation on the number of applications that can be signed with one certificate?

Whether you have adopted code Signing Certificate of any certificate Authority, there is no limit to sign Application, Software or Documents. You are allowed to sign any number of Apps, Software &...
Jake Adley's user avatar
1 vote

Is there any limitation on the number of applications that can be signed with one certificate?

There is no limit. It is worth noting that in most cases, the purpose of a signing certificate is not to certify the contents itself (in this case, the app), but its origins. Multiple apps signed with ...
Jarmund's user avatar
  • 6,128
1 vote

How to sign a Windows batch (.bat) file?

You may also convert the .bat file into a PowerShell script, signtool supports signing these files.
Emmanuel Bourg's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible