How to enable SHA256 signing in IA X12

[mwilner]

I have retried using the signing feature after installing IA X12 but it failed.
I am using a SHA256 certificate and added the respective time stamp URL but it failed trying to sign.
Using the Microsoft signing tools or FinalBuilder I can successfully sign all my dependable executable files but not within IA.

Best regards,

[FrancescoT]

Which TimeStamp URL did you specify?

[mwilner]

The SHA256 URL

http://sha256timestamp.ws.symantec.com/sha256/timestamp

[FrancescoT]

Can you do a try with: http://timestamp.comodoca.com/rfc3161?

[mwilner]

Excellent! this is resolving the problem.
Is this anywhere documented in the application help? If not maybe you want to add this in a future release.

[FrancescoT]

No, it's documented because these URLs may vary.
At any rate, we will take in account your suggestion.

[Edhy]

Hi Francesco,
I am having issues with signing my install file from X12 IDE. When using the "InstallAware Code Signing" application with the same values, then it will work.

I am attaching images of the process in the IDE which fails all the time and the process using the external code signing application.

The problem with the external code signing application is that we have to enter the values all the time we need to sign a file.

[FrancescoT]

i suggest you to try with: http://timestamp.digicert.com, for the TimeStamp URL parameter.

[Edhy]

Hi Francesco,

Thanks for the prompt reply.

Unfortunately this TimeStamp URL also failed, but notice that it will only fail for the last process, other files are being signed as per the image attached from the build.

[mwilner]

I have noticed when doing signing outside of IA that sometimes the signing is failing and I needed to run a loop around it.
This will not help in IA since we can't do this but maybe it is something the IA developer can look into.

[Edhy]

Hi Manfred,

Thanks for the tip.

[Edhy]

Hi Francesco,

i suggest you to try with: http://timestamp.digicert.com, for the TimeStamp URL parameter.

Actually this URLworked after I re-exported my certificate with the option "Enable certificate privacy" checked. My certificate provider suggested on their tutorial https://ksoftware.freshdesk.com/support ... n-windows- that this option to be optional, so I checked and tried again with all the URLs available and it only worked with http://timestamp.digcert.com.

Thanks again for the hints and recommendations.

[FrancescoT]

Happy you solved!