Page 1 of 2
Certificate Update
Posted: Sun Apr 29, 2012 9:09 am
by groseyal
Hi,
I'm using InstallAware 2012.
My certificate is expired and i need to update link to the neo.spc and neo.pvk files for each setup.exe file i have (have over 100 files).
Is there any script i can run which will update it to all my setup.exe files?
Regards,
Eyal Grossberg.
Re: Certificate Update
Posted: Mon Apr 30, 2012 9:36 am
by FrancescoT
Dear Eyal,
using a script it is not possible, but you can pass the required files using a command line.
In this case, you must first remove the references to those files from your previous projects.
Example:
miabuild "C:\Mysetup\mysetup.mpr"
Signcode.exe -spc TestCert.spc -v TestCert.pvk "C:\Mysetup\Release\Setup.exe" -t "
http://timestamp.verisign.com/scripts/timstamp.dll"
Note
MPR project file - it’s a plain text file, and should be pretty easy to locate the place where the Authenticode signature is located.
Hope this helps you.
Regards
Re: Certificate Update
Posted: Wed May 02, 2012 8:12 am
by groseyal
Hi,
Thank you for your reply.
i will put the new spc and pvk files in the same path as the previous one, therefore i only need to rebuild the project files.
What is the command for building the MPR project file ?
Regards,
Eyal Grossberg.
Re: Certificate Update
Posted: Wed May 02, 2012 9:05 am
by FrancescoT
Dear Eyal,
as I described with my previous post;
miabuild "C:\Mysetup\mysetup.mpr"
Regards
Re: Certificate Update
Posted: Thu May 03, 2012 1:34 am
by groseyal
Hi,
I tried to run the command from the windows command-line shell and got an error :
" 'miabuild' is not recognized as internal or external command, ... "
should i use other installaware command-line shell?
If yes, how i get there.
Regards,
Eyal Grossberg
Re: Certificate Update
Posted: Thu May 03, 2012 2:45 am
by groseyal
Hi,
I didn't find the miabuild.exe file.
Does my problem relates to my installed version?
I use Express 2012 with the very Basic installation.
Regards,
Eyal Grossberg.
Re: Certificate Update
Posted: Thu May 03, 2012 3:34 am
by FrancescoT
... Command line build it is not available with InstallAware Express edition.
For editions features please refer to:
http://www.installaware.com/right-edition.htm
Regards
Re: Certificate Update
Posted: Sun May 06, 2012 2:33 am
by groseyal
Hi,
Thank you very much.
I just upgrade my installAware version and it's working.
I have two more questions please,
1. Regarding to the time stamp URL file (
http://timestamp.verisign.com/scripts/timstamp.dll), can i remove it? should it change when i changing the certificate?
2. When i run the exe file of the Istall program i created, where i can find/check the certificate licence validity date?
Regards,
Eyal Grossberg.
Re: Certificate Update
Posted: Mon May 07, 2012 10:44 am
by FrancescoT
Dear Eyal,
you can use the time stamp URL provided by any certification authority. This must be used in order to certify the build date.
You should have received information about it, by The certification authority where you acquired your certificates.
For what I know there is no need to check it, because once expired, a warning will pop up when you execute your setup.
Regards
Re: Certificate Update
Posted: Sun May 13, 2012 6:05 am
by groseyal
Hello,
Thanks for the help.
Unfoterlanly it doesn't work.
We try to build without Time stamp URL and Password data (which are optional).
we have spc and pvk files and each time we run the build it fails with error: "Error during build: Unable to sign installation executable"
Regards,
Eyal Grossberg.
Re: Certificate Update
Posted: Mon May 14, 2012 7:53 am
by FrancescoT
Have you tried if work in the following way?
Signcode.exe -spc TestCert.spc -v TestCert.pvk "C:\Mysetup\Release\Setup.exe"
Regards
Re: Certificate Update
Posted: Wed May 16, 2012 7:24 am
by groseyal
Hi
since miabuild command is part of the developer version we can use it to create builds in command line
I haven't find signcode, how can i get it? and is there any documentation regarding the signcode parameters
in addition,as I undertand. I sould use the miabuild on an MPR project to creat the excutable file WITHOUT the authenticode signature and after completion run the signcode suggested command.
did i understand correctly?
Best regards,
Eyal Grossberg.
Re: Certificate Update
Posted: Wed May 16, 2012 8:54 am
by FrancescoT
Dear Eyal,
Yes it is correct.
Basically I suggested this to verify if using SignTool directly .. it works.
The SignTool it is located in "authenticode" folder under "InstallAware 2012".
For what I know it should be available with IA Developer edition (I'll check it).
Can you confirm it?
Regards
Re: Certificate Update
Posted: Mon May 28, 2012 5:54 am
by groseyal
Hi,
Yes, I found the command there.
Due to some problem in rendering certificate files (pvk, spc), i am using now only a pfx file.
i got new password and time stamp URL file.
I tried to use the Signcode command for it, but it not fit.
Which command should i use in order to update the certificate ?
Regards,
Eyal Grossberg.
Re: Certificate Update
Posted: Mon May 28, 2012 9:43 am
by FrancescoT
Dear Eyal.
have you tried this?
signtool sign /t <timestampurl> /f "<file.pfx>" /p pfxpassword "<filetosign.exe>"
Regards