Getting Digital Signature properties at installation time

[nunoborges]

When you sign a file using SignTool.exe it places various information such as the:
-encrypted sha1 hash of the original file
-Publisher info
-description of the product

We are embedding 'Affiliate Codes' into this signature so that we can give the referer of the software a percentage of the revenue. I am currently trying to do this by using the description (/d) option in the signtool.exe command.

Code: Select all

signtool.exe sign /v /f cryptologic.pfx /p xyz123 /t %TimeURL% /d "Affiliate Code=1232" abc.exe

This works as you would expect, but once the installation is complete, the signature and it's entire manifest disappears. So, can InstallAware capture this information about the signature during the installation process?

When you right-click a signed file and select properties, i want to be able to fetch all the data contained within the Digital Signatures Tab (select the signer name and click... details...advanced).

If InstallAware can do this, i can then invoke a web services call to our server during the installation, or i can store it in a file/registry for distribution later on.

If InstallAware cannot do this, i'll have to use the C API or COM to programmatically access the signature during installation.

Any help is appreciated,

Nuno