Questions tagged [code-signing]

Code signing is a process aiming at embedding an electronic signature into an executable. The signature uses cryptographic algorithms that allow to authentify the signer of the executable and to verify the integrity of the file.

Filter by
Sorted by
Tagged with
1 vote
1 answer
15 views

Automate Extended Validation (EV) code signing with Yubico Yubikey

I want to EV Code sign using a private key on a Yubico Yubikey 5 using signtool.exe, However everytime I sign a file, it prompts for the password. I would like the entry of this key to be automated as ...
Naxin's user avatar
  • 396
0 votes
0 answers
16 views

Using latest Code Sign Certificate in build scripts to sign algorithms sha1, sha384, sha256

The new certificate arrived on usb stick ( it seems IExplorer is no more used ) but it does not seem to any more support all algorithms; also the signtool no more accepts the pwd as cmd line parameter,...
Tom's user avatar
  • 6,735
0 votes
0 answers
13 views

signing exe with SSL certificate using eclipse tycho

I would like to use our code-signing SSL certificate to sign our product exe which is an eclipse RCP application and is built with eclipse tycho. Is there an official way to do this? There seems to be ...
flavio.donze's user avatar
  • 7,497
0 votes
0 answers
15 views

External frameworks fail notarization even after being codesigned

I use the Sparkle lib in my Developer ID MacOS application for auto-updating. I export the app using CLI tools (xcodebuild) and then notarize using xcrun notarytool, this all seems to work fine. I ...
nonsequiter's user avatar
3 votes
0 answers
29 views

Wix Installer showing 0x80070001: Failed while caching [duplicate]

I am creating the Desktop application exe installer using Wix application. First I am creating MSI using Wix and then I am creating the exe installer using WixBootstrapper project. created exe ...
Roshil K's user avatar
  • 2,623
0 votes
1 answer
20 views

SmartScreen still gives warning with EV Code Signing Certificate

I'm developing an app with Tauri and I've signed it with an EV Code Signing Certificate from Sectigo. I've tried signing through Tauri's built in system by inputting the certificate thumbprint and ...
eldev's user avatar
  • 1
0 votes
0 answers
35 views

Code signing (Self-signed cert) for WPF app with Secure File library in Azure CI Pipeline

I have a WPF application, and I had created the CI pipeline to build the application and publish the ClickOnce package. Everything works fine when Sign Manifest is turn off. However, when Sign ...
Geoffrey's user avatar
0 votes
0 answers
24 views

EV Code Signing 2023 - How to sign assemblies on a virtual server?

I am trying to better understand the new EV Code Signing certificate requirements set by the CA/B Forum per June 1st 2023. https://www.sectigo.com/knowledge-base/detail/Changes-to-Sectigo-Code-Signing-...
Nico's user avatar
  • 637
0 votes
0 answers
26 views

Is it possible to soften impact of recent changes to code signing process?

Code signing industry recently adopted CAB forum recommendations wrt code signing. Now private keys can only stored on hardware (USB key) provided (or managed) by CA. I see following downsides to this:...
C.M.'s user avatar
  • 3,091
-2 votes
0 answers
66 views

ImageEnumerateCertificates with multiple signatures

My task is to test if a file was signed with a specific certificate. To do this i use this code as draft. But now, I have files with multiple signatures. E.g. one file from office: signtool with &...
Ralph Erdt's user avatar
0 votes
1 answer
87 views

Signing code with certificate in Azure Key Vault Managed HSM

I am trying to sign code with a certificate from Azure Key Vault Managed HSM. This is an EV certificate, so I cannot just use a normal Azure Key Vault as in the helpful walkthrugh here does: https://...
Niels Harremoes's user avatar
0 votes
1 answer
22 views

Distribute app with Developer ID with Hardened Runtime and 3rd party CLI-executable - Code sign Error

While I tried to distribute my app with Developer ID from Xcode Organizer, I got this error: Hardened Runtime is not enabled. "ffmpeg" must be rebuilt with support for the Hardened Runtime. ...
soundflix's user avatar
  • 1,174
0 votes
0 answers
45 views

How to sign a Wine Winery package on MacOS?

I've created a Wine Winery package on MacOS for our Windows Application. Double-clicking the package, starts the windows application properly on MacOS. This works fine. We distribute this Wine Package ...
cvechelp's user avatar
0 votes
0 answers
25 views

How can I update a google chrome browser extension to use Google's new code signature?

How can an end-user manually/locally update the code signature for an extension? I used to use a google chrome extension, which broke 1 year ago because of Google Chrome's updated code signature. How ...
peppersandwich's user avatar
1 vote
1 answer
86 views

Code signing issue with SPM Dynamic Library

I have a framework (MyFramework) in which I want to use an exsting dynamic framework via SPM (called now MyDynamicFramework). I included it as a package dependency and all seems to be good: Then, I ...
zdtorok's user avatar
  • 618
0 votes
1 answer
125 views

USB Token EV Codesigning fails under Windows 11 / VSTO /

What I want to achieve? Code sign my VSTO Outlook Plugin using Visual Studio 2022. I follow these instructions: https://learn.microsoft.com/en-us/visualstudio/vsto/how-to-sign-office-solutions?view=vs-...
HHeckner's user avatar
  • 4,772
0 votes
0 answers
49 views

Gain reputation for Windows SmartScreen by submitting exe file for malware analysis

I need to certificate a Window app which is distributed as exe installer outside the Microsoft App Store. I read that if you submit the app to Microsoft for malware analysis, the smartscreen will go ...
user22315719's user avatar
0 votes
0 answers
78 views

Signtool "Store IsDiskFile() failed. 0x80070003"

I am currently trying to automate the signing of executables via a .bat script The following code is within the script: @echo off color 0A set CERTIFICATE_PATH=Certs\Pfx\cert.pfx set ...
GoldNova's user avatar
  • 147
0 votes
1 answer
30 views

Very basic question regarding "signing" your software

I am writing some addins (VSTO) for excel, word and visio to be used by the people in my company. When visual studio compiles the code it also creates a file called XXX_temporaryKey.pfx. This key ...
Perry 59's user avatar
0 votes
1 answer
39 views

How to prevent signtool from asking for a smartcard when signing an .EXE file?

On my development computer using Windows 10, I sign my .EXE files using a GlobalSign hardware token where an EV signing certificate is stored, using the command (as recommended on the GlobalSign.com ...
Karl171's user avatar
0 votes
0 answers
22 views

Custom binary for codesign in xcodebuild (handling timestamp service is unavailable)

On one of our projects, we have flaky errors from the codesign binary with timestamp service is unavailable errors. The thing is that these errors are happening way too random and cannot be reproduced ...
tt.Kilew's user avatar
  • 5,994
0 votes
1 answer
56 views

how to verify if an executable is signed by EV certificate in Windows

With WinVerifyTrust(https://learn.microsoft.com/en-us/windows/win32/api/wintrust/nf-wintrust-winverifytrust) I am able to verify executable signature, now I want to check if signing certificate is EV (...
byq's user avatar
  • 3
0 votes
0 answers
23 views

Code sign XLSM file with PFX certificate in reactjs or nodejs

I have an xlsm file which is generated programmatically on a click event. Also I have a pfx certificate. I would like to sign the xlsm file with pfx certificate programmatically using either reactjs/ ...
Vidya G Nadh's user avatar
0 votes
0 answers
301 views

Xcode 14: Command CodeSign failed with a nonzero exit code

I'm encountering an issue with Xcode 14 where I'm getting the error message "Command CodeSign failed with a nonzero exit code" during the build process. This error prevents me from running ...
Richie's user avatar
  • 44
0 votes
1 answer
37 views

Is there a difference between normal code signing and "authenticode"?

I need to build a dll that will be loaded from ms sql server. I have a codesigning certificate issued by sectigo. I signed the dll using signtool /a /fd SHA256 <dll name>. I verified the ...
Rani Sharim's user avatar
0 votes
0 answers
43 views

ClickOnce Security Warning on the EXE

I have a ClickOnce project deploying, signed with Comodo (Sectigo) Code Signing. However, even with the code signing, the .exe that's updated gets flagged with a security warning upon program launch. ...
WorldWind's user avatar
  • 311
1 vote
1 answer
63 views

Mac dylib and executable problem, help needed

So I have to use an old app on a new Mac. The app requires a dylib called libxls.3.dylib to run. However the new Mac did not installed this library and it seems that there's no way to install it at ...
Young Shway's user avatar
0 votes
2 answers
103 views

The code signature version is no longer supported - facebook-ios-sdk

The issue started to appear after I have implemented facebook-ios-sdk in order to use facebook signing in in my app. While testing on a simulator, everything works perfectly, but as long as I try to ...
Andrii Derevianko's user avatar
2 votes
1 answer
365 views

Avoiding repeated password prompt when signing with EV code signing certificate on a SafeNet Thales token

I have a Thales SafeNet token with an EV code signing certificate. To sign an executable I use signtool in a command line: signtool sign /tr "http://timestamp.digicert.com" /td sha256 /fd ...
Coder12345's user avatar
  • 3,451
1 vote
0 answers
69 views

Azure Key Vaults for Code Signing on macOS

I am going to buy a new OV certificate for code signing an Electron application developed by the company I am working for. Since new industry standards, we will need to store it in an HSM, more ...
Giorgio Catenacci's user avatar
0 votes
0 answers
66 views

can i use windows signtool on certificate created by openssl?

I used openssl to created CSR and self-signed certificate (.crt). I took this certificate to use windows signtool, but I got the following error. Can i use windows signtool on certificate created by ...
Jack's user avatar
  • 67
0 votes
0 answers
151 views

What prevents me for being able to publish a .net MAUI application on IOS from a mac?

I am getting issues publishing my .Net MAUI app on iOS. It looks related to the signing process but I am stuck. Here is part of the output when using diagnose mode: ... ... 09:41:54.521 2>...
TaiT's's user avatar
  • 3,148
0 votes
1 answer
220 views

Codesign issue with XCode 14/Flutter 3.75

Having trouble building a Flutter app targeting iOS. The issue came up out of the blue. The only big difference during the development cycle is the account owner had to accept new terms in the Apple ...
andymeadows's user avatar
  • 1,296
0 votes
0 answers
17 views

How to properly deploy a VSTO Outlook plugin, signed with a code certificate, through ClickOnce for Windows Defender acceptance?

I have developed an Outlook plugin that is deployed to thousands of clients. Recently, some of our clients are having issues when we push out updates for the plugin. The update is deployed on our ...
Cédric Boivin's user avatar
0 votes
1 answer
44 views

How to pass certificate filename & password to Custom signing tool in Advanced Installer

When adding a digital signature in the Advanced installer, if you specify the "Built In" sign tool, you can Choose your certificate file from your source code. Specify the password and it ...
komodosp's user avatar
  • 3,336
0 votes
1 answer
95 views

Can you use a batch script as a Custom sign tool in Advanced Installer?

In Advanced Installer, I'm trying to set up the files it generates to be digitally signed. In the Digital Signature section, Settings, I choose "Custom" as the Sign Tool. There are 2 ...
komodosp's user avatar
  • 3,336
0 votes
0 answers
43 views

ElectronJS code signing with Authenticode

I have looked at electrons docs on how to sign my NodeJS ElectronJS code specifically for windows as im not working on apps for mac at the moment. However the options for obtaining a certificate are ...
Braydan's user avatar
  • 25
0 votes
0 answers
21 views

Sign .net Core Debug Build in Visual Studio Code

due to group policy we are not able to debug our .net applications whatsoever. what we did as a solution for releases is to create a code signin certificate. this works perfectly fine for release ...
AbeTasticx's user avatar
0 votes
1 answer
101 views

NSIS Script - Digitally Signing Windows Installer

I am new to the implementation of NSIS where i would like to create a windows installer file and digitally sign it immediately via NSIS Script file. I am able to create the windows installer using the ...
Kamal's user avatar
  • 453
-1 votes
1 answer
108 views

Where do I buy a code signing certificate I can just download and not get on a USB drive?

I'm trying to get a new certificate for my open source SQL desktop app. Previously I just downloaded the certificate from Sectigo. Now all the certificate authorities want to ship me a physical drive ...
Matthew Rathbone's user avatar
-2 votes
1 answer
63 views

How to sign dylib file which can be replaced?

I have poor understanding in this question. The major step to distribute any application is the code signing, it signs application with dependant dynamic library. As I understand OS will check signed ...
Alex Aparin's user avatar
  • 4,403
1 vote
0 answers
116 views

Signtool error: An unexpected internal error occurred during Excel macros signing "Error: SignerSign() failed." (-2147220493/0x800403f3)

I am encountering an error while attempting to sign Excel macros using SignTool. The error message I receive is as follows: "SignTool Error: An unexpected internal error has occurred. Error ...
Evans Ejike's user avatar
0 votes
1 answer
107 views

How to implement code-signing with FreeRTOS OTA and AWS

I'm working on an ESP32 device that has been configured to receive OTA updates via AWS and FreeRTOS. As part of the initial configuration for these devices, they were flashed with a hard-coded ...
mindlis's user avatar
  • 1,546
0 votes
0 answers
60 views

How do I script codesign to trust an imported keychain from the Mac command line

Hi I am trying to create a standard build project for our product so I can run it on any Mac using just one script. so I have exported all my distribution certificates into a p12 file which I store in ...
canderse's user avatar
  • 299
0 votes
0 answers
64 views

macOS custom Keychain provider development

I would like to develop a macOS keychain integration with the network attached HSM storing the private key. However, I am unable to find the documentation describing the way how integration with the ...
user1563721's user avatar
  • 1,383
0 votes
0 answers
17 views

Is there a way in Windows to check a program's signature is unchanged before every launch?

I am a planning to deploy a program on Windows and I want to make sure it has not been changed once installed. The program will be signed which I believe could reveal if it had been changed and also ...
ahnkle's user avatar
  • 467
1 vote
0 answers
60 views

SignTool Error: An unexpected internal error has occurred when signing Excel files

I have already installed the required DLLs using regsrv.exe and tested it in two different environments. I can sign VBS files, but I am having trouble finding information on the error message I am ...
SettusBlake's user avatar
0 votes
0 answers
120 views

errsecinternalcomponent Unable to build chain to self-signed for signer. Failed to codesign. In Visual Studio from windows with MacInCloud

I'm using Visual Studio 2022 with Maui to create a cross platform app. I've followed Microsoft's instructions to "Publish an iOS app for App Store distribution", found here: https://learn....
Ben Blanco's user avatar
0 votes
0 answers
73 views

How to import Sectigo code signing certificate into Windows certificate store

We have a C# .net application that we want to code sign. I've purchased a certificate through Sectigo and have a PEM file and the Certificate Signing Request (that was generated on the web page by ...
Matthew van Boheemen's user avatar
0 votes
0 answers
94 views

Module signing tries to use executing user instead of certificate user

I have a group of users that either do or don't have the correct access (from a different program) to get the results of a stored procedure. I've created a view of individual user rights and which ...
anythingButThat's user avatar

1
2 3 4 5
51