X4 Code signing fails

Got a problem you cannot solve? Try here.
pfennig
Posts: 168
Joined: Wed Nov 08, 2006 8:39 am

X4 Code signing fails

Postby pfennig » Sat Apr 16, 2016 4:24 am

So far we didn't have any success with code signing after upgrading to X4.

At first we didn't change the setup script at all and it failed, without saying why.
Than we edited the script by applying a new certificate file and password, with the same result.

The same new certificate works as expected when we're using it with our executables from the command line.

We're running our complete builds in FinalBuilder under Windows 10.
Best regards
pfennig

FrancescoT
Site Admin
Posts: 5360
Joined: Sun Aug 22, 2010 4:28 am

Re: X4 Code signing fails

Postby FrancescoT » Mon Apr 18, 2016 8:31 am

Francesco Toscano
InstallAware Software

White Papers (HowTos) - http://www.installaware.com/publication ... papers.htm
Publications - http://www.installaware.com/publications-review.htm
InstallAware Help -F1 anywhere in the InstallAware IDE

pfennig
Posts: 168
Joined: Wed Nov 08, 2006 8:39 am

Re: X4 Code signing fails

Postby pfennig » Tue Apr 19, 2016 3:54 am

The signature algorithm is sha256RSA, the signature hash algorithm is sha256.

The signing works with X3 and from command line using C:\Program Files (x86)\Windows Kits\10\bin\x86\signtool.exe.
Best regards

pfennig

FrancescoT
Site Admin
Posts: 5360
Joined: Sun Aug 22, 2010 4:28 am

Re: X4 Code signing fails

Postby FrancescoT » Tue Apr 19, 2016 6:28 am

Dear Pfennig,

with IA X4 the Authenticode process applies now a Double signature to any signed file (...as required by the "Windows enforcement of authenticode code signing and timestamping").

Due of this, it's required the use a valid "SHA256_timestamp_url" that supports both SHA-1 and SHA-2 hashes.
For example; http://timestamp.comodoca.com/rfc3161

That said, are you sure that you have updated your <SHA256_timestamp_url> accordingly in the IA X4 Authenticode parameters?

Regards
Francesco Toscano
InstallAware Software

White Papers (HowTos) - http://www.installaware.com/publication ... papers.htm
Publications - http://www.installaware.com/publications-review.htm
InstallAware Help -F1 anywhere in the InstallAware IDE

pfennig
Posts: 168
Joined: Wed Nov 08, 2006 8:39 am

Re: X4 Code signing fails

Postby pfennig » Tue Apr 19, 2016 7:27 am

This was the missing part, thank you.
Best regards

pfennig

FrancescoT
Site Admin
Posts: 5360
Joined: Sun Aug 22, 2010 4:28 am

Re: X4 Code signing fails

Postby FrancescoT » Tue Apr 19, 2016 1:05 pm

:D
Francesco Toscano
InstallAware Software

White Papers (HowTos) - http://www.installaware.com/publication ... papers.htm
Publications - http://www.installaware.com/publications-review.htm
InstallAware Help -F1 anywhere in the InstallAware IDE


Return to “Technical Support”

Who is online

Users browsing this forum: No registered users and 45 guests