Real Software Forums

The forum for Real Studio and other Real Software products.
[ REAL Software Website | Board Index ]
It is currently Fri Sep 22, 2017 10:40 pm
xojo

All times are UTC - 5 hours




Post new topic Reply to topic  [ 24 posts ]  Go to page 1, 2  Next
Author Message
 Post subject: Code-Signing and Windows 7
PostPosted: Fri Feb 26, 2010 3:02 am 
Offline

Joined: Tue Dec 27, 2005 8:10 am
Posts: 502
Location: Sweden
(This is an update to my original post on code signing some years ago: viewtopic.php?f=6&t=4739)

I now had to renew my Thawte Code Signing certificate and used my Windows 7 machine to signup for the new certificate. If you are about to renew or signup for a Code Signing Certificate I strongly recommend using a XP machine as Vista or Windows 7 no longer allows exporting the Private Key and create a backupable pfx-file as indicated in my previous code-signing post - this means that if you loose your private key you have to request a new certificate!

I now renewed my certificate (and paid Thawte the $499 for the certificate) using the following steps:
1) Signup for the certificate with Thawte using MSIE8
2) Thawte process the request and issued the certificate after 2 days
3) Login to Thawte Certificate Center and download your certificate. MSIE will install this automatically into the Registry (on Vista/Win 7)
4) Download Thawte root certificates from https://www.thawte.com/roots/index.html and install Code Signing and Timestamping CA certificates
5) As the Microsoft SDK should already be installed, the signtool.exe too can be used to sign the EXE. You will probably have two certificates on the system (the old certificate is still valid as you renew before the old expired - right?) and the "/a" switch will allow signtool.exe to select the "best" certificate which works for me. The following command is what I use to sign and timestamp:
"C:\Program Files\Microsoft SDKs\Windows\v7.0\Bin\signtool.exe" sign /n "NAME OF CERTIFICATE" /a /t http://timestamp.verisign.com/scripts/timestamp.dll /v "My Application.exe"

NAME OF CERTIFICATE is usually the name of your organization requesting the certificate. You can find it in mmc using the Certificate snap-in.

Please note that I do not endorse or support Thawte code signing certificates or is affiliated with Thawte in any way. You should browse the market for alternatives.

Cheers,
/msa

_________________
Mattias Sandström (using RB Studio 2009r5.1 and 2011r3 on Windows 7 (64-bit))


Top
 Profile  
Reply with quote  
 Post subject: Re: Code-Signing and Windows 7
PostPosted: Thu Feb 07, 2013 12:03 pm 
Offline

Joined: Tue Nov 08, 2005 5:52 pm
Posts: 111
Hi, is there a way to sign Windows applications without paying $499?

Thanks


Top
 Profile  
Reply with quote  
 Post subject: Re: Code-Signing and Windows 7
PostPosted: Thu Feb 07, 2013 1:51 pm 
Offline

Joined: Thu Mar 27, 2008 5:48 am
Posts: 7
Hi,
You can check http://www.startssl.com/
You will need a Class 2 certificate to sign object code ($ 59.90)
It will be a little more to sign as a Company.
I am not affiliated with them.

Best Regards,
Carlos.


Top
 Profile  
Reply with quote  
 Post subject: Re: Code-Signing and Windows 7
PostPosted: Thu Feb 07, 2013 5:57 pm 
Offline
User avatar

Joined: Fri Sep 30, 2005 11:48 am
Posts: 3554
Location: Lenexa, KS
We've been using K Software with good results. http://codesigning.ksoftware.net They have a relatively easy to use signing utility too.

_________________
Bob K.

A blog about being a Real Studio/Xojo developer at http://www.bkeeneybriefs.com


Top
 Profile  
Reply with quote  
 Post subject: Re: Code-Signing and Windows 7
PostPosted: Fri Feb 08, 2013 1:24 am 
Offline

Joined: Tue Dec 27, 2005 8:10 am
Posts: 502
Location: Sweden
It's great to see that the market for code signing certificates is more sane now than a couple of years ago.
Will definitely look into these certificates when it is time to renew.

_________________
Mattias Sandström (using RB Studio 2009r5.1 and 2011r3 on Windows 7 (64-bit))


Top
 Profile  
Reply with quote  
 Post subject: Re: Code-Signing and Windows 7
PostPosted: Mon Feb 11, 2013 10:16 am 
Offline

Joined: Tue Nov 08, 2005 5:52 pm
Posts: 111
Bob Keeney wrote:
We've been using K Software with good results. http://codesigning.ksoftware.net They have a relatively easy to use signing utility too.


Thanks for the tip, those are much more reasonable prices.


Top
 Profile  
Reply with quote  
 Post subject: Re: Code-Signing and Windows 7
PostPosted: Mon Feb 11, 2013 11:18 am 
Offline
User avatar

Joined: Fri Sep 30, 2005 11:48 am
Posts: 3554
Location: Lenexa, KS
baquiano wrote:
Bob Keeney wrote:
We've been using K Software with good results. http://codesigning.ksoftware.net They have a relatively easy to use signing utility too.


Thanks for the tip, those are much more reasonable prices.


Definitely. We've used them for our own products and for client products and haven't had any issues. It's relatively easy to integrate into InnoSetup too so the installer is code signed as well.

_________________
Bob K.

A blog about being a Real Studio/Xojo developer at http://www.bkeeneybriefs.com


Top
 Profile  
Reply with quote  
 Post subject: Re: Code-Signing and Windows 7
PostPosted: Fri Feb 15, 2013 11:55 am 
Offline

Joined: Mon Dec 12, 2011 7:25 pm
Posts: 186
Location: Grand Rapids MI Area
I'm not sure if this is worth anything but I was looking at code signing in yahoo search and came across this.
It might be a cheaper way to go for some people, I'm not sure.

GlobalSign at https://www.globalsign.com/code-signing/#tab13

They had an online chat and I asked them the question listed below.


EvanHello, Thank you for contacting GlobalSign. Please wait a moment while I review your question.

Jerry Do I have to buy codesign for both mac and windows or does it support both in the same package

EvanIt will support both, you will want to order using the PKCS#12 option as it will be easier to import into the mac keychain

Jerry So some of the things I have been reading from apple saying that they are the only place to get codesigning is not true then ?

Evanit depends what you are signing

Jerry I am writing a program for the mac and windows

I will not place it in the app store

Evanit should work then without any issues

Jerry ok, thank you

_________________
iMac 27" (2.8GHz Intel Core i5, 16GB RAM, 1TB Drive) OS X Mountain Lion 10.8.3 and Windows 7
Toshiba Laptop Running Windows 7, WinXP SP3 and Windows 8
REAL Studio Enterprise Edition 2012r2.1
http://www.theultimatecampgroundlog.com
Being rewritten for the Mac


Top
 Profile  
Reply with quote  
 Post subject: Re: Code-Signing and Windows 7
PostPosted: Fri Feb 15, 2013 12:01 pm 
Offline
User avatar

Joined: Fri Sep 30, 2005 11:48 am
Posts: 3554
Location: Lenexa, KS
It may support Mac code signing but that won't pass new GateKeeper from Apple. For that, you need an Apple certificate only available through Apple's Developer Program.

_________________
Bob K.

A blog about being a Real Studio/Xojo developer at http://www.bkeeneybriefs.com


Top
 Profile  
Reply with quote  
 Post subject: Re: Code-Signing and Windows 7
PostPosted: Fri Feb 15, 2013 12:10 pm 
Offline

Joined: Mon Dec 12, 2011 7:25 pm
Posts: 186
Location: Grand Rapids MI Area
OK so it is worthless then.

Thought it might be something.

_________________
iMac 27" (2.8GHz Intel Core i5, 16GB RAM, 1TB Drive) OS X Mountain Lion 10.8.3 and Windows 7
Toshiba Laptop Running Windows 7, WinXP SP3 and Windows 8
REAL Studio Enterprise Edition 2012r2.1
http://www.theultimatecampgroundlog.com
Being rewritten for the Mac


Top
 Profile  
Reply with quote  
 Post subject: Re: Code-Signing and Windows 7
PostPosted: Wed Mar 27, 2013 8:51 pm 
Offline

Joined: Fri Jul 21, 2006 12:28 am
Posts: 509
Bob Keeney wrote:
It may support Mac code signing but that won't pass new GateKeeper from Apple. For that, you need an Apple certificate only available through Apple's Developer Program.

Code signing certificates can be exported in OS X. Can an exported Apple Developer code signing certificate be imported into Windows for signing Windows apps?

_________________
Regards,
Carl
Capaho Web
http://www.capaho.com


Top
 Profile  
Reply with quote  
 Post subject: Re: Code-Signing and Windows 7
PostPosted: Thu Mar 28, 2013 9:40 am 
Offline

Joined: Mon May 31, 2010 5:35 am
Posts: 2412
Location: Netherlands
capaho wrote:
Bob Keeney wrote:
It may support Mac code signing but that won't pass new GateKeeper from Apple. For that, you need an Apple certificate only available through Apple's Developer Program.

Code signing certificates can be exported in OS X. Can an exported Apple Developer code signing certificate be imported into Windows for signing Windows apps?

Now thats a very good question. Anyone?

_________________
SWORT™
- Windows Vista, Windows XP, Windows 7, Linux Mint 11 and Mac OSX Lion
- REAL Studio Enterprise(latest) and WEB Edition(latest)
- Plugins (MBS Complete, ToringoLib, Einhugur, VanHoek + Some open source plugins)
For Dutch User Groups ask me to enter!


Top
 Profile  
Reply with quote  
 Post subject: Re: Code-Signing and Windows 7
PostPosted: Thu Mar 28, 2013 2:09 pm 
Offline
User avatar

Joined: Fri Sep 30, 2005 11:48 am
Posts: 3554
Location: Lenexa, KS
Was wondering that myself. Somehow I doubt it but perhaps the planet and stars align on this one.

_________________
Bob K.

A blog about being a Real Studio/Xojo developer at http://www.bkeeneybriefs.com


Top
 Profile  
Reply with quote  
 Post subject: Re: Code-Signing and Windows 7
PostPosted: Thu Mar 28, 2013 7:40 pm 
Offline

Joined: Fri Jul 21, 2006 12:28 am
Posts: 509
Perhaps if anyone here has an Apple Developer certificate they could try it and report back the results. It would be nice to have a definitive answer before I have to replace my expired code signing certificate.

_________________
Regards,
Carl
Capaho Web
http://www.capaho.com


Top
 Profile  
Reply with quote  
 Post subject: Re: Code-Signing and Windows 7
PostPosted: Fri Mar 29, 2013 9:39 am 
Offline

Joined: Mon May 31, 2010 5:35 am
Posts: 2412
Location: Netherlands
capaho wrote:
Perhaps if anyone here has an Apple Developer certificate they could try it and report back the results. It would be nice to have a definitive answer before I have to replace my expired code signing certificate.

I have an apple id cert, gonny try it today.

_________________
SWORT™
- Windows Vista, Windows XP, Windows 7, Linux Mint 11 and Mac OSX Lion
- REAL Studio Enterprise(latest) and WEB Edition(latest)
- Plugins (MBS Complete, ToringoLib, Einhugur, VanHoek + Some open source plugins)
For Dutch User Groups ask me to enter!


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 24 posts ]  Go to page 1, 2  Next

All times are UTC - 5 hours


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group