PC SOFT

FOROS PROFESIONALES
WINDEVWEBDEV y WINDEV Mobile

Inicio → WINDEV 2024 → Signing Certificate Unrecognized
Signing Certificate Unrecognized
Iniciado por tom.thorward, 04,may. 2015 17:23 - 3 respuestas
Publicado el 04,mayo 2015 - 17:23
Although I have been a Windev user since version 8, I am a recent owner of Windev 20, and have begun converting various applications to the new version. Naturally, in this age of rampant malware, I want my customers to know that they are installing and running genuine software and not altered versions. So, my company obtained and is using signing certificates on all our software.

In the Windev installer creation wizard, there are two places where the software can be signed. One pertains to the installer, and the other to the application itself. In the installer wizard, I have indicated that I want to sign in both places.

When the installation program runs, it properly displays my company's information. However, when the application itself starts up, it lists the origin as "Unknown Publisher".

I thought at first that perhaps the "WPF" installation descriptor file had been corrupted, so I tried several times to start with a fresh version. I also tried several different applications. All with the same incorrect result.

The strange thing is that (as you know) the executable application file is re-compiled each time an installation program is created. When one examines the characteristics of this file, it is listed as a signed executable. If you copy it into the target installation directory, the certificate information is properly displayed. But when you install it with the installation program, the certificate information no longer displays. This behavior is consistent across several of my applications.

Any ideas about how to solve this mystery?
Miembro registrado
409 mensajes
Publicado el 04,mayo 2015 - 19:45
Hi Tom, I have had such kind of surprises too. Are you installing your software on W7 or W8 ? As the behaviour is totally different. MS is using a "new" version of signing certificate for W8, linked to the firm's reputation, or the amount of installations you have done...

Give it a try on W7, to see if the problem happens or not. If not, be sure it is linked with the expanded certificate used by MS/W8, which of course, is more expensive than the normal one...

Have fun, Michel.

--
If it works, don't touch it, don't look at it, AND don't fix it ! No patches, no SP ! JUST DONT FIX IT.
Miembro registrado
1 mensaje
Publicado el 04,mayo 2015 - 23:13
Michel,

Thanks for the response. I am installing on Windows 7. Luckily, my principle clients, federal agencies, are "slow adopters" and haven't made the leap to Windows 8 yet. Hopefully they'll skip that one.

What is strange is that the same executable operates differently in regard to the signing certificate when installed by the Windev installer and when copied from the exe directory to the same location on disk. That would appear to preclude an operating system problem. It seems that the installer is somehow flipping a bit, but who knows? Both files are the exact same size on disk and both report that they are "signed" when you look at their detailed properties.

--
Tom Thoprward
Miembro registrado
409 mensajes
Publicado el 05,mayo 2015 - 00:01
Hi Tom, if it was working on previous WD1X, and you had no problems, then it might be a bug in the new WX20 version. I'll suggest you to contact the tech support and mention the details of your situation.

I'll never had such an issue with W7 X86/64, but with W8. Fabrice Harari was checking a beta version of my software, and the problem did appear on its W8 configuration, and not on my W7.

You have two versions of Code Signing Certificates :
Standard Code Signing Certificates
Extended Validation (EV) Code Signing Certificates

I just refuse to pay more than the double of the price to have MonkeySoft displaying a trusted software.
https://www.globalsign.com/en/code-signing/microsoft-authenticode/

In case you need a new certificate, I recommend you going through http://www.startssl.com/ nice price, fast, very helpful, top tech support !

Have fun. Michel

--
If it works, don't touch it, don't look at it, AND don't fix it ! No patches, no SP ! JUST DONT FIX IT.