Signing installers with certificates

https://mastodon.social/@rvkennedy

Signing installers with certificates

10 Apr

Windows Defender has recently decided to falsely mark all of our installers as containing some virus or other.

It'll be a long long while before they get around to questioning whether their algorithms are in fact, "full of it", as they say, so let's see what happens if we sign our executables using a root certificate.

First, get a certificate, from Comodo. This takes weeks while they check whether an arbitrary non-governmental organization, Dun and Bradstreet, regards your company as genuine. Just check with Companies House? Way too simple!

So you need to get a DUNS number from D&B, then buy a certificate from tucows/Comodo.

After jumping through their hoops (which don't seem to be very secure to me, just cumbersome), you'll get a .crt file.

Finally, use the pfx and signtool.exe (in the Windows SDK) to sign your executable.

Signing installers with certificates

10 Apr

Windows Defender has recently decided to falsely mark all of our installers as containing some virus or other.

So you need to get a DUNS number from D&B, then buy a certificate from tucows/Comodo.

After jumping through their hoops (which don't seem to be very secure to me, just cumbersome), you'll get a .crt file.

Finally, use the pfx and signtool.exe (in the Windows SDK) to sign your executable.

Signing installers with certificates

Comments

Technical Blog

Using Sublime Text with FASTBuild

More from this blog

Embedding v8 Javascript in an MSVC project

Don't step into STL function in Visual Studio 2022

Lambdas, or functions as function parameters, in Sfx

The Sfx shader language and shader variants

Why the Metaverse Failed

Signing installers with certificates

Signing installers with certificates

Command Palette

Comments

Technical Blog

Using Sublime Text with FASTBuild

More from this blog

Signing installers with certificates

Signing installers with certificates