Questions tagged [authenticode]

Code signing is the process of digitally signing executables and scripts to confirm the software author and guarantee that the code has not been altered or corrupted since it was signed by use of a cryptographic hash. Microsoft Authenticode (TM) is Microsoft's implementation of digitally code signing executables.

Code signing is the process of digitally signing executables and scripts to confirm the software author and guarantee that the code has not been altered or corrupted since it was signed by use of a cryptographic hash. Microsoft Authenticode (TM) is Microsoft's implementation of digitally code signing executables.

185 questions
0
votes
1 answer

powershell signing certificate unknownerror

I am following the instructions to sign a script and I've got to the part where I sign the add-signature.ps1 file so that I can sign my script using it $cert = @(Get-ChildItem cert:\CurrentUser\My -codesigning)[0] Set-AuthenticodeSignature…
MarcusR1
  • 39
  • 6
0
votes
2 answers

What kind of signing do I need to use IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY?

One of my toy projects require IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY in PE header to run. I've been testing it with test signing on, but I'm considering buying a cert if I can afford. The documents on this are too old, so I'm not sure whether the…
0
votes
1 answer

How to write custom data into signature field of an EXE after signing?

I've an EXE which is code signed and saved on the server. When any user wants to download the EXE, I've to embed a user specific information into the EXE which I get to know when the download request comes from the user. Constraints: I can't…
RBT
  • 24,161
  • 21
  • 159
  • 240
0
votes
1 answer

Inconsistent parsing problem with signify package in python

I am trying to use signify to parse a Linux kernel (not the kernel of the machine where I am parsing). Parsing on some machines it succeeds, and on others the parse fails. First, a success on one machine. $ grep PRETTY /etc/os-release…
0
votes
0 answers

WinAPI: codesign a directory

Is it possible to code-sign and validate a directory on Windows? Basically, something like MacOS bundle directory codesigning and validation?
0
votes
1 answer

Sign certificate with private key and logon domain

I'm implementing the program related to logon domain with certificate by custom KSP and my credential provider. I have successfully interacted from my credential provider to custom KSP. I'm in the process of implementing custom KSP. The steps I…
sliva
  • 11
  • 4
0
votes
1 answer

How to find out what is wrong with digital certificate?

Is there a way to see where exactly is the problem with digital certificate in Windows? I have bought code signing certificate from CA and I am using it to sign ClickOnce application (using mage.exe) and signing process goes OK. But, when client is…
Tomislav
  • 13
  • 1
  • 4
0
votes
1 answer

How to retrieve and decode a timestamp date property from authenticode signed files in .NET

I recently found here a very informative article about getting various informations from Authenticode signed executables: Get timestamp from Authenticode Signed files in .NET I managed how to retrieve TimeStamp date attribute but i don't know much…
dragon
  • 1
  • 1
0
votes
1 answer

How to use digital certificate to check the author of a program?

We develop a Win32 program (=host) which allows 3rd party to write plug-ins. As some plug-ins contains valuable piece of code (for example, high quality video scalar), the 3rd parties want to limit their plug-in to work only with our host…
Moto
  • 63
  • 6
0
votes
2 answers

Convert CodeFluent.Runtime.Utilities.Authenticode.FindSuitableCertificate to C#

I'm trying to convert Dim certificate As X509Certificate2 = CodeFluent.Runtime.Utilities.Authenticode.FindSuitableCertificate() from VB.Net to C# and I know that it's X509Certificate2 AuthenticodeCert =…
DemarcPoint
  • 183
  • 1
  • 9
0
votes
1 answer

How to check dll Authenticode?

I have a dll that is digitally signed, when my application start I want check that this dll is "original", in particular isn't replaced with a fake one. How can I do this checking the Authenticode signature? I never did something like this, and I…
0
votes
2 answers

Unable to access key in HSM for sh256 signing but can for sha1 signing

How can I enable access to key in HSM when signing as sha256? When I sign as sha1 sign tool properly pulls the cert key out of the HSM but if I change to "/fd sha256" the key can't be found within the container. I'm sure signtool can access the…
Eva Brigid
  • 123
  • 14
0
votes
1 answer

Using SignTool for Excel add-ins

I want to use Sign Tool from Windows SDK on my Excel Add-in project. The signing works fine on the installer, but when I try on the dll-files it has no effect. I tried signing the vsto-file instead but then I get "This file format cannot be signed…
afghg
  • 33
  • 1
  • 6
0
votes
1 answer

Authenticode certificate to avoid virus flagging

Will an authenticode certificate stop anti-virus software from flagging my application? I've done some research and am aware that it will come up as a verified company during install, but I'm really looking for it so that A/V will stop giving false…
Marsh
  • 188
  • 2
  • 10
0
votes
1 answer

UWP sideloading requirements

I am developing a UWP app for distribution outside the store and outside managed environments. I intend to create an appx package and put it on a website for direct download: users should be able to double click it and have the App Installer do the…
Alberto
  • 403
  • 3
  • 11