Questions tagged [code-signing-certificate]

Code signing is a security technology, used in OS X, that allows you to certify that an app was created by you. Once an app is signed, the system can detect any change to the app—whether the change is introduced accidentally or by malicious code.

Code signing is a security technology that allows you to certify that an application was created by you. Once an application is signed, the system can detect any change to the application—whether the change is introduced accidentally or by malicious code.

enter image description here enter image description here More

418 questions
9
votes
1 answer

Phonegap - Error - Keystore alias not recognized

I am strugging to sign an Android app using Phonegap Build I get the following error: Error - Keystore alias not recognized I am using this to create the keystore in my terminal: keytool -genkey -v -keystore name.keystore -alias alias -keyalg RSA…
9
votes
1 answer

Android - What happens when a signing key expires?

If a signing key expires, do existing apks refuse to install, or does it just mean that new apps can't be signed with that key? We are recommended to use keys that expire in 25+ years, and Google Play mandates expiry of at least 2033-10-22! However,…
7
votes
1 answer

Is there still a possibility for free code signing certificates in 2018?

So I'm working on a project that will be open-sourced later. But when I release my executables with my project, I don't want that each user gets a message that my app is from an unidentified developer. I also don't have the money(I'm 13, so I don't…
user8425075
7
votes
2 answers

Codesign returned errSecInternalComponent in High Sierra

I tried to codesign using: /usr/bin/codesign -f -s $IDENTITY --keychain $KEYCHAIN --entitlements $ENTITLEMENTS Payload/Test.app But I get an errSecInternalComponent error.
7
votes
3 answers

Code signing certificates for Java, Adobe AIR, Authenticode, VBS - are they different?

We have a code-signing certificate, purchased from GlobalSign for Authenticode signing (as they call it). Now we need to sign Java applet and soon Adobe AIR module (applet?). The question is: from technical point of view is there any difference…
7
votes
1 answer

Generating Certificate Signing Request using Management Console

I am following https://godaddy.com/help/windows-generate-csr-for-code-or-driver-signing-certificate-7282 guide to generate a CSR to request a code signing/software publishing certificate. In management console when I Right-click Certificates, and…
mhsarosh
  • 188
  • 6
7
votes
1 answer

Sign executable within a clickonce application when publishing

I have a c# .net project in Visual Studio 2013. I have successfully signed the manifest told Visual studio to also sign the assembly. However the application exe file is not being signed. After googling I added the following to the post build…
7
votes
0 answers

Signing Extension Mozilla Firefox without upload to AMO

I want to sign my add-on but i don't want to upload my add-on to AMO for verifying. What can i do for sign my add-ons with my own certificate? Can anybody tell me how to sign add-on without upload to AMO?
7
votes
2 answers

signtool fail with Inno Setup with exit code 0x1

Suddenly my Inno Setup compiler stopped working. Since the last time I used it, I just installed a new certificate issued still to the same company. I've configured the sign tool in this way (NAME is the beginning of the string for the Subject in…
7
votes
2 answers

Certificates, Provisioning Profiles, public/private keys demystified

This topic continues to confuse me. I thought I'd write out my current understanding and hopefully find out the things I'm right about/things I'm wrong about. When you create a development certificate, there is a concept of a public and private…
7
votes
1 answer

I can't code sign my iOS application

I've purchased the developer program earlier and I've installed the certificate into my keychain (both iPhone developer and iPhone distribution). When I'm going to deploy apps to real devices, Xcode gives me this error: Code Sign error: There are…
user1343911
6
votes
1 answer

Convert a code signing certificate from Sectigo/Comodo into a .pfx file that is actually usable

When I tried to download the code signing certificate from Sectigo/Comodo, using Firefox I just ended up downloading a file called CollectCCC, with no file extension. It is not clear to me how to use it to sign a binary. When I try to use it to sign…
6
votes
2 answers

Xcode 10 won't create a developer signing certificate, get OSStatus error -2147416032

I'm a newbie to Xcode 10 and tried to create a stickers app using Automatic Signing and logged in with a free appleID account. In the app target, the status for the certificate says that it couldn't be completed (OSStatus error -2147416032.) and no…
News
  • 63
  • 2
6
votes
2 answers

Making code signing token credentials persistent

I have a commercial code-signing certificate, which was delivered on a USB token. The vendor (GlobalSign) provides a download to a utility that needs to be installed to use the token, SafeNet. This all works fine; however, I've previously had the…
KenD
  • 4,529
  • 7
  • 43
  • 77
6
votes
5 answers

Why does signtool.exe only find certificate when run as admin?

I'm setting up a new development laptop, and have installed a self-issued code signing certificate. I can see it in certmgr under my Current Users's Personal Certificates. When I try to build from the Developer Command Prompt For Visual Studio 2017…
1 2
3
27 28