Code signing an Access2007 application
in [General]
|
Prev: SAINSBURYS
Next: report error message
From: Tony Toews [MVP] on 23 May 2010 19:33 "David W. Fenton" <XXXusenet(a)dfenton.com.invalid> wrote: >>>PS: FYI: The one article does mention http://www.startssl.com/ >>>which might even have cheaper prices (however I think they require >>>that you have already registered, not sure). $49.95 >> >> Actually that's $49.95 for two years. An even better deal. > >That website is down -- won't come up within the browser, and >doesn't respond to PING. Traceroute suggests they are based in >Isreal, but is dying somewhere before it gets to their server. I >can't quite see how I could depend on a cert provider whose own >website is not redundantly hosted so that it's never down! Puzzling because it's working just fine for me. I suspect a error somewhere between your ISP and them then. C:\>tracert startssl.com Tracing route to startssl.com [192.116.242.20] over a maximum of 30 hops: 2 d205-206-24-1.abhsia.telus.net [205.206.24.1] 3 154.11.197.65 4 204.225.243.18 5 sl-gw12-sea-0-0.sprintlink.net [144.224.113.153] 6 sl-bb21-sea-4-0-0.sprintlink.net [144.232.6.123] 7 pos1-2.BR1.SEA1.ALTER.NET [204.255.169.117] 8 0.so-4-2-0.XT2.SEA1.ALTER.NET [152.63.105.86] 9 0.xe-3-2-0.IL2.NYC9.ALTER.NET [152.63.26.93] 10 0.ge-1-2-0.IL2.NYC12.ALTER.NET [152.63.26.98] 11 ge-0-2-0.XT2.LND9.ALTER.NET [158.43.252.46] 12 GigabitEthernet1-0-0.GW3.LND9.ALTER.NET [158.43. 150.110] 13 62.189.148.35 14 EDGE.LON-02-RE1-xe-0-0-0-51.bb.012.net.il [80.17 9.165.170] 15 EDGE.LON-01-RE1-xe-0-0-0-100.bb.012.net.il [80.1 79.165.69] 16 BRDR.PT-M320-RE1-so-3-2-0-0.bb.012.net.il [80.17 9.165.153] 17 WAN-ASR-PT-01-Te0-0-0-2450.bb.012.net.il [212.19 9.4.2] 18 gateway.startcom.org [212.117.158.94] 19 * ^C C:\> >I wanted to look because the "ssl" in the name suggests to me that >it's more aimed at websites needing HTTPS certs and for SSH >tunneling and the like, rather than for EXE certification. They appear to have exe certs too. Tony -- Tony Toews, Microsoft Access MVP Tony's Main MS Access pages - http://www.granite.ab.ca/accsmstr.htm Tony's Microsoft Access Blog - http://msmvps.com/blogs/access/ For a convenient utility to keep your users FEs and other files updated see http://www.autofeupdater.com/ Granite Fleet Manager http://www.granitefleet.com/
From: Tony Toews [MVP] on 23 May 2010 19:35 "David W. Fenton" <XXXusenet(a)dfenton.com.invalid> wrote: >>>Ahh, found it. https://winqual.microsoft.com/SignUp/ >> >><giggle> MS sure doesn't like it when you hit that URL with your >> default FIrefox browser. > >I get the identical page in FF and IE. It doesn't say anything about >the discount. Interesting. In IE I get a page that states in big letters Establish an Account. Then gives you a list of companies. Then Create a Company Account and then the bulleted three paragraphs down states "VeriSign 'Microsoft Authenticode' Code Signing Digital Certificate ($499 $99 USD) " Where the $499 is crossed out. Tony -- Tony Toews, Microsoft Access MVP Tony's Main MS Access pages - http://www.granite.ab.ca/accsmstr.htm Tony's Microsoft Access Blog - http://msmvps.com/blogs/access/ For a convenient utility to keep your users FEs and other files updated see http://www.autofeupdater.com/ Granite Fleet Manager http://www.granitefleet.com/
From: Tony Toews [MVP] on 23 May 2010 19:39 "David W. Fenton" <XXXusenet(a)dfenton.com.invalid> wrote: >> As far as I know you can digitally sign any exe or msi file and a >> few others. But I'm not an expert here. > >Does a single cert cover multiple versions of your EXE? Or do you >have to get a new one each time you issue an update? A single cert covers any number of exe's, msi's etc I wish to publish for the year or whatever duration I've purchased the cert. I do have to sign the code each time I want to make the exe available to the public. I would assume Access MDBs, ACCDEs, etc but I haven't bothered to try that yet. That said I *always* run the above cmd file when making an exe for testing purposes on other Virtual PC OSs. So I might run it five or ten times a day. >And what is the price you're talking about here? $50? $500? $5000? Using the link I provided to the https://secure.ksoftware.net/code_signing.html site - $100 per year. Tony -- Tony Toews, Microsoft Access MVP Tony's Main MS Access pages - http://www.granite.ab.ca/accsmstr.htm Tony's Microsoft Access Blog - http://msmvps.com/blogs/access/ For a convenient utility to keep your users FEs and other files updated see http://www.autofeupdater.com/ Granite Fleet Manager http://www.granitefleet.com/
From: David W. Fenton on 24 May 2010 11:50
"Tony Toews [MVP]" <ttoews(a)telusplanet.net> wrote in news:8jejv59ll9g19f7jithfructgn6k5ij1ip(a)4ax.com: > "David W. Fenton" <XXXusenet(a)dfenton.com.invalid> wrote: > >>>>PS: FYI: The one article does mention http://www.startssl.com/ >>>>which might even have cheaper prices (however I think they >>>>require that you have already registered, not sure). $49.95 >>> >>> Actually that's $49.95 for two years. An even better deal. >> >>That website is down -- won't come up within the browser, and >>doesn't respond to PING. Traceroute suggests they are based in >>Isreal, but is dying somewhere before it gets to their server. I >>can't quite see how I could depend on a cert provider whose own >>website is not redundantly hosted so that it's never down! > > Puzzling because it's working just fine for me. I suspect a error > somewhere between your ISP and them then. My traceroute was failing just before the last step of yours, so it really was an issue on their end, not my ISP's. > C:\>tracert startssl.com > > Tracing route to startssl.com [192.116.242.20] > over a maximum of 30 hops: > > 2 d205-206-24-1.abhsia.telus.net [205.206.24.1] > 3 154.11.197.65 > 4 204.225.243.18 > 5 sl-gw12-sea-0-0.sprintlink.net [144.224.113.153] > 6 sl-bb21-sea-4-0-0.sprintlink.net [144.232.6.123] > 7 pos1-2.BR1.SEA1.ALTER.NET [204.255.169.117] > 8 0.so-4-2-0.XT2.SEA1.ALTER.NET [152.63.105.86] > 9 0.xe-3-2-0.IL2.NYC9.ALTER.NET [152.63.26.93] > 10 0.ge-1-2-0.IL2.NYC12.ALTER.NET [152.63.26.98] > 11 ge-0-2-0.XT2.LND9.ALTER.NET [158.43.252.46] > 12 GigabitEthernet1-0-0.GW3.LND9.ALTER.NET [158.43. > 150.110] > 13 62.189.148.35 > 14 EDGE.LON-02-RE1-xe-0-0-0-51.bb.012.net.il [80.17 > 9.165.170] > 15 EDGE.LON-01-RE1-xe-0-0-0-100.bb.012.net.il [80.1 > 79.165.69] > 16 BRDR.PT-M320-RE1-so-3-2-0-0.bb.012.net.il [80.17 > 9.165.153] > 17 WAN-ASR-PT-01-Te0-0-0-2450.bb.012.net.il [212.19 > 9.4.2] > 18 gateway.startcom.org [212.117.158.94] > 19 * ^C > C:\> > >>I wanted to look because the "ssl" in the name suggests to me that >>it's more aimed at websites needing HTTPS certs and for SSH >>tunneling and the like, rather than for EXE certification. > > They appear to have exe certs too. The site is up now (though I'd already looked at it in the Google cache). -- David W. Fenton http://www.dfenton.com/ usenet at dfenton dot com http://www.dfenton.com/DFA/ |