Code signing an Access2007 application
in [General]
|
Prev: SAINSBURYS
Next: report error message
From: David W. Fenton on 23 May 2010 16:58 "Tony Toews [MVP]" <ttoews(a)telusplanet.net> wrote in news:bfggv5hcnaufru8igrlk5vm1l0gtjb93p2(a)4ax.com: > As far as I know you can digitally sign any exe or msi file and a > few others. But I'm not an expert here. Does a single cert cover multiple versions of your EXE? Or do you have to get a new one each time you issue an update? And what is the price you're talking about here? $50? $500? $5000? -- David W. Fenton http://www.dfenton.com/ usenet at dfenton dot com http://www.dfenton.com/DFA/
From: David W. Fenton on 23 May 2010 17:00 "Tony Toews [MVP]" <ttoews(a)telusplanet.net> wrote in news:r34jv599b164vtg28rorau4og70qhdf1g9(a)4ax.com: > "Tony Toews [MVP]" <ttoews(a)telusplanet.net> wrote: > >>Ahh, found it. https://winqual.microsoft.com/SignUp/ > ><giggle> MS sure doesn't like it when you hit that URL with your > default FIrefox browser. I get the identical page in FF and IE. It doesn't say anything about the discount. -- David W. Fenton http://www.dfenton.com/ usenet at dfenton dot com http://www.dfenton.com/DFA/
From: David W. Fenton on 23 May 2010 17:09 "Tony Toews [MVP]" <ttoews(a)telusplanet.net> wrote in news:3i3jv5ttfed1fuqapc1mo6a1g08il80lth(a)4ax.com: > "Mark Andrews" <mandrews___NOSPAM___(a)rptsoftware.com> wrote: > >>PS: FYI: The one article does mention http://www.startssl.com/ >>which might even have cheaper prices (however I think they require >>that you have already registered, not sure). $49.95 > > Actually that's $49.95 for two years. An even better deal. That website is down -- won't come up within the browser, and doesn't respond to PING. Traceroute suggests they are based in Isreal, but is dying somewhere before it gets to their server. I can't quite see how I could depend on a cert provider whose own website is not redundantly hosted so that it's never down! I wanted to look because the "ssl" in the name suggests to me that it's more aimed at websites needing HTTPS certs and for SSH tunneling and the like, rather than for EXE certification. -- David W. Fenton http://www.dfenton.com/ usenet at dfenton dot com http://www.dfenton.com/DFA/
From: MikeR on 23 May 2010 18:20 David W. Fenton wrote: > "Tony Toews [MVP]" <ttoews(a)telusplanet.net> wrote in > news:bfggv5hcnaufru8igrlk5vm1l0gtjb93p2(a)4ax.com: > >> As far as I know you can digitally sign any exe or msi file and a >> few others. But I'm not an expert here. > > Does a single cert cover multiple versions of your EXE? Or do you > have to get a new one each time you issue an update? > > And what is the price you're talking about here? $50? $500? $5000? > You can sign any number of whatever, as long as the cert is not expired. Mike
From: Mark Andrews on 23 May 2010 18:41
I think I'll go with Comodo. I've been reading a few other blogs etc and it seems like a good way to go. I have a single person LLC. We'll see how easy it is. Appreciate the help, Mark "Tony Toews [MVP]" <ttoews(a)telusplanet.net> wrote in message news:dp1jv5pcd16qaducfh7llo9u6e5s8sa2up(a)4ax.com... > "Mark Andrews" <mandrews___NOSPAM___(a)rptsoftware.com> wrote: > >>Quick question: I read all the pages, In your opinion would you go with: >>- a verisign cert $99/1 year (2 or 3 year are too expensive) >>or >>- a comodo cert for a few years >> >>I would like to get one for a few years so I don't have to go through this >>hassle again anytime soon. >>However not sure I understand all the benefits you might get from using a >>verisign cert? >> >>I only want to deal with the message when installing the software >>(downloading from website and installing). >> >>Thanks again, I might of just bought one that was too expensive, >>You saved me time and money! >>Mark >> >>PS: FYI: The one article does mention http://www.startssl.com/ which might >>even have cheaper prices (however I think they require that you have >>already >>registered, not sure). $49.95 > > If you want to use the official Microsoft "Works with Windows 7" logo > then you'd want the Verisign cert. If not then go with the cheapest. > > Hmm, StartSLL registration seems to be relatively painless as all it > asks for is your name and address. I do know of one MVP associated > with them. So if that works it's even better of a deal. > > Also note that code signing works best if you have a corporation. If > you're a sole proprietorship it gets tricker as, I think, some cert > issuing orgs won't deal with you. A personal code signing cert might > be next to impossible to get. Note that this paragraph may be very > wrong in some significant aspects as I'm passing on what I've read. > > Tony > -- > Tony Toews, Microsoft Access MVP > Tony's Main MS Access pages - http://www.granite.ab.ca/accsmstr.htm > Tony's Microsoft Access Blog - http://msmvps.com/blogs/access/ > For a convenient utility to keep your users FEs and other files > updated see http://www.autofeupdater.com/ > Granite Fleet Manager http://www.granitefleet.com/ |